Commits · b1064159c000771642d108e64c6b85271d87e34f · Digital Preservation / ansible_lza_server_hardening · GitLab

Snippets Groups Projects

Jan 29, 2024
- fix: undo changes done with the systemd override for rpcbind.socket, because... · b1064159
  Jörg Sachse authored 1 year ago
  b1064159
Dec 22, 2023
- fix: create working version of rpcbind configuration · 4f738758
  Jörg Sachse authored 1 year ago
  
  4f738758
- fix: use correct syntax for sshd_config · 4b693b08
  Jörg Sachse authored 1 year ago
  
  4b693b08
- sec: implement Terrapin (CVE-2023-48795) config mitigations while patches are unavailable · 75556bf3
  Jörg Sachse authored 1 year ago
  
  75556bf3
Dec 07, 2023
- feat: prepare tasks for NFSv3 rpcbind risk mitigations. CAUTION: as we're... · 7200fc1c
  Jörg Sachse authored 1 year ago
  7200fc1c
Nov 15, 2023
- feat: resolve ND-2709 'Bereinigung clamd-Services Rosetta-Server' · f1a4cab6
  Jörg Sachse authored 1 year ago
  
  f1a4cab6
Oct 09, 2023
- feat: update ClamAV config · 42aa5529
  Jörg Sachse authored 1 year ago
  
  42aa5529
- feat: update Freshclam config & services · e31ef7f7
  Jörg Sachse authored 1 year ago
  
  e31ef7f7
- feat: assume 'state: present' for new iptables rules, unless something different is explicitely set · c5992139
  Jörg Sachse authored 1 year ago
  
  c5992139
Oct 02, 2023
- feat: assume 'state: present' for new iptables rules, unless something different is explicitely set · f096ff69
  Jörg Sachse authored 1 year ago
  
  f096ff69
Aug 30, 2023
- Merge branch 'fix_ci' into 'master' · 83a4aabc
  Jörg Sachse authored 1 year ago
  83a4aabc
- test: adapt Molecule setup to suit peculiarities from the latest Molecule v6 release · 624ad926
  Jörg Sachse authored 1 year ago
  
  624ad926
Aug 21, 2023
- fix: remove non-existent package · 361bce80
  Jörg Sachse authored 1 year ago
  
  361bce80
Jun 27, 2023
- Merge branch 'master' of... · c5ed0628
  Jörg Sachse authored 1 year ago
  c5ed0628
- style: satisfy linter · 8e26326c
  Jörg Sachse authored 1 year ago
  
  8e26326c
- test: use external linting instead of deprecated 'molecule lint' · 11dbd69a
  Jörg Sachse authored 1 year ago
  
  11dbd69a
- sec: block ICMP timestamp requests/replies · 71537746
  Jörg Sachse authored 1 year ago
  
  71537746
Apr 27, 2023
- Merge branch 'master' of... · 33d5b63f
  Jörg Sachse authored 2 years ago
  33d5b63f
- feat: set 'AllowTcpForwarding yes' for ExL support to tunnel services to their... · a55dc3cf
  Jörg Sachse authored 2 years ago
  a55dc3cf
Mar 06, 2023
- fix: install iptables-persistent to make sure iptables rules are boot persistent · 0a8a885a
  Jörg Sachse authored 2 years ago
  
  0a8a885a
Mar 02, 2023
- feat: prohibit SSH login with anything other than publickey and for certain users · 2a52041a
  Jörg Sachse authored 2 years ago
  
  2a52041a
Aug 09, 2022
- fix: loop syntax · f26accad
  Jörg Sachse authored 2 years ago
  
  f26accad
Aug 05, 2022
- Merge branch 'master' of... · 13bb671a
  Jörg Sachse authored 2 years ago
  13bb671a
- test: implement all necessary changes for using GitLab-CI, including Linter... · a430a0c8
  Jörg Sachse authored 2 years ago
  a430a0c8
Apr 11, 2022
- Add LICENSE · 4240f975
  Jörg Sachse authored 3 years ago
  
  4240f975
- Delete LICENSE · a366a2e7
  Jörg Sachse authored 3 years ago
  
  a366a2e7
Mar 18, 2022
- chore: ignore backups of SSH host keys · b072ca20
  Jörg Sachse authored 3 years ago
  
  b072ca20
- doc: set license (ND-2199) · ccb99ffb
  Jörg Sachse authored 3 years ago
  
  ccb99ffb
- doc: describe usage of ansible-galaxy for installing required role dependencies · 83eafb53
  Jörg Sachse authored 3 years ago
  
  83eafb53
- chore: configure Ansible for improved performance and logging · 1931a797
  Jörg Sachse authored 3 years ago
  
  1931a797
- chore: encode Coding Guidelines for yamllint (ND-2199) · 839469b2
  Jörg Sachse authored 3 years ago
  
  839469b2
- chore: implement shellcheck recommendations, ansible-lint-stage and shellcheck stage (ND-2199) · dabcde60
  Jörg Sachse authored 3 years ago
  
  dabcde60
Mar 11, 2022
- fix: use correct syntax to disable insecure HostKeyAlgorithms, KexAlgorithms and Ciphers · 87702866
  Jörg Sachse authored 3 years ago
  
  87702866
- feat: validate modified sshd_config file to avoid locking ourselves out of SSH... · c15ae893
  Jörg Sachse authored 3 years ago
  c15ae893
Mar 02, 2022
- feat: disable insecure SSH algorithms (host key algos, KEX algos, ciphers) · d530f25c
  Jörg Sachse authored 3 years ago
  
  d530f25c
Mar 01, 2022
- fix: set ClamD StreamMaxLength to 4GB (was: 4MB, which is far too low for Rosetta) · 61af71b6
  Jörg Sachse authored 3 years ago
  
  61af71b6
Dec 21, 2021
- fix: notify correct handler name to restart clamd service after changes · 52e88bbb
  Jörg Sachse authored 3 years ago
  
  52e88bbb
Sep 15, 2021
- fix: restart ClamD service using SystemD-templated name · f32ce3e9
  Jörg Sachse authored 3 years ago
  
  f32ce3e9
Sep 10, 2021
- feat: add installation tasks for ClamAV on RedHat · 5cbacdcd
  Jörg Sachse authored 3 years ago
  
  5cbacdcd
- chore: remove unnecessary task · 1b4ea3f9
  Jörg Sachse authored 3 years ago
  
  1b4ea3f9

DE: Impressum · Datenschutzerklärung | EN: Legal Notice · Privacy Policy