Skip to content

automation: Update devsec.hardening to version 7.5.0

Housekeeper (bot) requested to merge renovate/devsec.hardening-7.x into master

This MR contains the following updates:

Package Type Update Change
devsec.hardening (source) galaxy-collection minor 7.1.0 -> 7.5.0

Release Notes

dev-sec/ansible-os-hardening

v7.5.0

Compare Source

Full Changelog

Implemented enhancements:

  • Not accepting source routing for IPv6. This was already done for IPv4. #​424 (joubbi)

Fixed bugs:

  • SSH kex sntrup4591761x25519-sha512@​tinyssh.org replaced #​433
  • Fix ssh kex sntrup761x25519-sha512@​openssh.com for openssh >= 8.5 #​437 (BenjaminBoehm)

Closed issues:

  • Harden user home directories #​276

Merged pull requests:

v7.4.0

Compare Source

Full Changelog

Implemented enhancements:

Closed issues:

  • Errors in packer build for vagrant builder #​244

Merged pull requests:

  • Use pam_pwhistory.so instead of pam_unix.so for remembering old passwords #​431 (joubbi)
  • Remove comments from PAM config file, but keep it in the template #​430 (joubbi)
  • add support for using a proxy to test with molecule #​429 (rndmh3ro)
  • Improve Documentation for sysctl defaults #​418 (joubbi)

v7.3.0

Compare Source

Full Changelog

Implemented enhancements:

  • pam_tally2 is deprecated in RHEL8 and pam_faillock should be used in EL7 and EL8 instead. #​377
  • Replace pam_tally2 with pam_faillock in Redhat #​273
  • Extend GSSAPI configuration support to ssh_config #​403 (wzzrd)
  • add restart handler variable for mysql role #​399 (rndmh3ro)
  • restructure PAM handling and update for currently supported Linux distributions #​392 (schurzi)

Fixed bugs:

  • Not able to use sudo command for user authenticated via ActiveDirectory #​278
  • You shouldn't touch /etc/pam.d/system-auth-ac in RedHat/CentOS #​252

Closed issues:

  • Netdata monitoring of docker in docker no longer possible #​412
  • Unable to connect with SSH (Permission denied (publickey)) #​411
  • TASK [os_hardening : configure auditd | package-08] #​410
  • Collection throws undefined ansible_role_name error in auditd task #​409
  • Ensure permissions on /etc/crontab are configured #​375
  • Documentation should be updated #​361

Merged pull requests:

v7.2.0

Compare Source

Full Changelog

Implemented enhancements:

  • Add variable to specify SSH host RSA key size #​394 (Normo)
  • Set default for ssh host key files only when hardening the server #​393 (Normo)

Fixed bugs:

  • A reason why instance would go in rescue mode ? #​267
  • fix galaxy action to update local galaxy.yml #​395 (Normo)

Closed issues:

  • Updating version in galaxy.yml should be part of the release process #​396
  • ssh_hardening fail on keypair generation #​388
  • The system must display the date and time of the last successful account logon upon an SSH logon. #​362
  • Error in "root password is present" step #​326

Merged pull requests:

v7.1.1

Compare Source

Full Changelog

Fixed bugs:

  • use fqcn for community.crypto.openssh_keypair module #​389 (schurzi)

Closed issues:

  • AnsibleUndefinedVariable: 'ansible_role_name' is undefined with 7.1.0 #​387

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box.

This MR has been generated by Renovate Bot. The local configuration can be found in the local Renovate Bot repository.

Merge request reports