Commits · 6eb912c4d1476d69f13a5d6ff127a7c9dacc02fb · Digital Preservation / ansible_lza_server_hardening · GitLab

Snippets Groups Projects

Sep 03, 2024
- fix: set default policy in the last step instead of an earlier step to avoid getting locked out · 6eb912c4
  Jörg Sachse authored 10 months ago
  
  6eb912c4
Aug 12, 2024
- feat: add switch to make sure that ClamAV is not uninstalled on Archivematica-Servers · 12c80f67
  Jörg Sachse authored 11 months ago
  
  12c80f67
Aug 07, 2024
- feat: resolves GitLab issue 2368... · d2e3217f
  Jörg Sachse authored 11 months ago
  d2e3217f
Jul 26, 2024
- feat: use Ansible's dnf module to install packages · 73b08844
  Jörg Sachse authored 11 months ago
  
  73b08844
- fix: improve task waiting for ClamAV signature databases to be downloaded by... · 89719f79
  Jörg Sachse authored 11 months ago
  89719f79
- chore: cleanup unused code · 159f0a5d
  Jörg Sachse authored 11 months ago
  
  159f0a5d
- fix: remove EPEL installation task; we expect EPEL to be enabled on production... · 8835b09e
  Jörg Sachse authored 11 months ago
  8835b09e
- style: satisfy linter · d8f24e7d
  Jörg Sachse authored 11 months ago
  
  d8f24e7d
Jan 29, 2024
- fix: undo changes done with the systemd override for rpcbind.socket, because... · b1064159
  Jörg Sachse authored 1 year ago
  b1064159
Dec 22, 2023
- fix: create working version of rpcbind configuration · 4f738758
  Jörg Sachse authored 1 year ago
  
  4f738758
- fix: use correct syntax for sshd_config · 4b693b08
  Jörg Sachse authored 1 year ago
  
  4b693b08
- sec: implement Terrapin (CVE-2023-48795) config mitigations while patches are unavailable · 75556bf3
  Jörg Sachse authored 1 year ago
  
  75556bf3
Dec 07, 2023
- feat: prepare tasks for NFSv3 rpcbind risk mitigations. CAUTION: as we're... · 7200fc1c
  Jörg Sachse authored 1 year ago
  7200fc1c
Nov 15, 2023
- feat: resolve ND-2709 'Bereinigung clamd-Services Rosetta-Server' · f1a4cab6
  Jörg Sachse authored 1 year ago
  
  f1a4cab6
Oct 09, 2023
- feat: update ClamAV config · 42aa5529
  Jörg Sachse authored 1 year ago
  
  42aa5529
- feat: update Freshclam config & services · e31ef7f7
  Jörg Sachse authored 1 year ago
  
  e31ef7f7
Oct 02, 2023
- feat: assume 'state: present' for new iptables rules, unless something different is explicitely set · f096ff69
  Jörg Sachse authored 1 year ago
  
  f096ff69
Aug 21, 2023
- fix: remove non-existent package · 361bce80
  Jörg Sachse authored 1 year ago
  
  361bce80
Jun 27, 2023
- style: satisfy linter · 8e26326c
  Jörg Sachse authored 2 years ago
  
  8e26326c
- sec: block ICMP timestamp requests/replies · 71537746
  Jörg Sachse authored 2 years ago
  
  71537746
Apr 27, 2023
- feat: set 'AllowTcpForwarding yes' for ExL support to tunnel services to their... · a55dc3cf
  Jörg Sachse authored 2 years ago
  a55dc3cf
Mar 02, 2023
- feat: prohibit SSH login with anything other than publickey and for certain users · 2a52041a
  Jörg Sachse authored 2 years ago
  
  2a52041a
Aug 09, 2022
- fix: loop syntax · f26accad
  Jörg Sachse authored 2 years ago
  
  f26accad
Aug 05, 2022
- test: implement all necessary changes for using GitLab-CI, including Linter... · a430a0c8
  Jörg Sachse authored 2 years ago
  a430a0c8
Mar 11, 2022
- fix: use correct syntax to disable insecure HostKeyAlgorithms, KexAlgorithms and Ciphers · 87702866
  Jörg Sachse authored 3 years ago
  
  87702866
- feat: validate modified sshd_config file to avoid locking ourselves out of SSH... · c15ae893
  Jörg Sachse authored 3 years ago
  c15ae893
Mar 02, 2022
- feat: disable insecure SSH algorithms (host key algos, KEX algos, ciphers) · d530f25c
  Jörg Sachse authored 3 years ago
  
  d530f25c
Mar 01, 2022
- fix: set ClamD StreamMaxLength to 4GB (was: 4MB, which is far too low for Rosetta) · 61af71b6
  Jörg Sachse authored 3 years ago
  
  61af71b6
Dec 21, 2021
- fix: notify correct handler name to restart clamd service after changes · 52e88bbb
  Jörg Sachse authored 3 years ago
  
  52e88bbb
Sep 10, 2021
- feat: add installation tasks for ClamAV on RedHat · 5cbacdcd
  Jörg Sachse authored 3 years ago
  
  5cbacdcd
- chore: remove unnecessary task · 1b4ea3f9
  Jörg Sachse authored 3 years ago
  
  1b4ea3f9
- fix: remove deprecated SafeBrowsing option from FreshClam config · c4228385
  Jörg Sachse authored 3 years ago
  
  c4228385
- fix: create ClamAV log directory · fcda204b
  Jörg Sachse authored 3 years ago
  
  fcda204b
Sep 02, 2021
- fix: don't overwrite permissions for import user · 2a037609
  Jörg Sachse authored 3 years ago
  
  2a037609
- fix: only try to install debsecan on Debian systems · 98b8d4b6
  Jörg Sachse authored 3 years ago
  
  98b8d4b6
Aug 05, 2021
- refactor: remove individual task tags in favor of tag inheritance · 8fc3c855
  Jörg Sachse authored 3 years ago
  
  8fc3c855
Jul 13, 2021
- fix: added meta task so role can be combined with others without thinking about handler priorities · aa01046a
  Jens Steidl authored 4 years ago
  
  aa01046a
Jan 29, 2021
- initial commit (confidential information removed) · 4766f945
  Jörg Sachse authored 4 years ago
  
  4766f945

DE: Impressum · Datenschutzerklärung | EN: Legal Notice · Privacy Policy