Commits · 75556bf3147f02af03ce9c962d3a8855ea374a17 · Digital Preservation / ansible_lza_server_hardening · GitLab

Snippets Groups Projects

Dec 22, 2023
- sec: implement Terrapin (CVE-2023-48795) config mitigations while patches are unavailable · 75556bf3
  Jörg Sachse authored 1 year ago
  
  75556bf3
Dec 07, 2023
- feat: prepare tasks for NFSv3 rpcbind risk mitigations. CAUTION: as we're... · 7200fc1c
  Jörg Sachse authored 1 year ago
  7200fc1c
Nov 15, 2023
- feat: resolve ND-2709 'Bereinigung clamd-Services Rosetta-Server' · f1a4cab6
  Jörg Sachse authored 1 year ago
  
  f1a4cab6
Oct 09, 2023
- feat: update ClamAV config · 42aa5529
  Jörg Sachse authored 1 year ago
  
  42aa5529
- feat: update Freshclam config & services · e31ef7f7
  Jörg Sachse authored 1 year ago
  
  e31ef7f7
Oct 02, 2023
- feat: assume 'state: present' for new iptables rules, unless something different is explicitely set · f096ff69
  Jörg Sachse authored 1 year ago
  
  f096ff69
Aug 21, 2023
- fix: remove non-existent package · 361bce80
  Jörg Sachse authored 1 year ago
  
  361bce80
Jun 27, 2023
- style: satisfy linter · 8e26326c
  Jörg Sachse authored 2 years ago
  
  8e26326c
- sec: block ICMP timestamp requests/replies · 71537746
  Jörg Sachse authored 2 years ago
  
  71537746
Apr 27, 2023
- feat: set 'AllowTcpForwarding yes' for ExL support to tunnel services to their... · a55dc3cf
  Jörg Sachse authored 2 years ago
  a55dc3cf
Mar 02, 2023
- feat: prohibit SSH login with anything other than publickey and for certain users · 2a52041a
  Jörg Sachse authored 2 years ago
  
  2a52041a
Aug 09, 2022
- fix: loop syntax · f26accad
  Jörg Sachse authored 2 years ago
  
  f26accad
Aug 05, 2022
- test: implement all necessary changes for using GitLab-CI, including Linter... · a430a0c8
  Jörg Sachse authored 2 years ago
  a430a0c8
Mar 11, 2022
- fix: use correct syntax to disable insecure HostKeyAlgorithms, KexAlgorithms and Ciphers · 87702866
  Jörg Sachse authored 3 years ago
  
  87702866
- feat: validate modified sshd_config file to avoid locking ourselves out of SSH... · c15ae893
  Jörg Sachse authored 3 years ago
  c15ae893
Mar 02, 2022
- feat: disable insecure SSH algorithms (host key algos, KEX algos, ciphers) · d530f25c
  Jörg Sachse authored 3 years ago
  
  d530f25c
Mar 01, 2022
- fix: set ClamD StreamMaxLength to 4GB (was: 4MB, which is far too low for Rosetta) · 61af71b6
  Jörg Sachse authored 3 years ago
  
  61af71b6
Dec 21, 2021
- fix: notify correct handler name to restart clamd service after changes · 52e88bbb
  Jörg Sachse authored 3 years ago
  
  52e88bbb
Sep 10, 2021
- feat: add installation tasks for ClamAV on RedHat · 5cbacdcd
  Jörg Sachse authored 3 years ago
  
  5cbacdcd
- chore: remove unnecessary task · 1b4ea3f9
  Jörg Sachse authored 3 years ago
  
  1b4ea3f9
- fix: remove deprecated SafeBrowsing option from FreshClam config · c4228385
  Jörg Sachse authored 3 years ago
  
  c4228385
- fix: create ClamAV log directory · fcda204b
  Jörg Sachse authored 3 years ago
  
  fcda204b
Sep 02, 2021
- fix: don't overwrite permissions for import user · 2a037609
  Jörg Sachse authored 3 years ago
  
  2a037609
- fix: only try to install debsecan on Debian systems · 98b8d4b6
  Jörg Sachse authored 3 years ago
  
  98b8d4b6
Aug 05, 2021
- refactor: remove individual task tags in favor of tag inheritance · 8fc3c855
  Jörg Sachse authored 3 years ago
  
  8fc3c855
Jul 13, 2021
- fix: added meta task so role can be combined with others without thinking about handler priorities · aa01046a
  Jens Steidl authored 4 years ago
  
  aa01046a
Jan 29, 2021
- initial commit (confidential information removed) · 4766f945
  Jörg Sachse authored 4 years ago
  
  4766f945

DE: Impressum · Datenschutzerklärung | EN: Legal Notice · Privacy Policy