Skip to content

puppet-os-hardening 2.0.0
Compare
Choose a tag to compare
@mcgege mcgege released this 19 Dec 17:35
· 188 commits to master since this release
2.0.0
b6efa1c
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Closed issues:

  • Update some RH settings in this module #102
  • SLES and OEL errors when ipv6 is disabled #82
  • Failed to generate additional resources #75
  • Multiple conflicts with Puppet Enterprise #74
  • Conflict with Puppet Enterprise 2016.1.1 #71
  • allow_core_dump set to true still ends up setting /etc/security/limits.d/10.hardcore.conf and /etc/profile.d/pinerolo_profile.sh files #68
  • IPv6 setting problem #67
  • Log martian packets #66
  • Merge #64 #65
  • net.ipv6.conf.default.accept_ra #56

Merged pull requests:

  • Prepare module for v2.0.0 #109 (mcgege)
  • Update links + contributors in README #108 (mcgege)
  • Implement new RH defaults (see issue #102) #103 (mcgege)
  • Avoid picking up users retrieved from SSSD or other domain services. #101 (tprobinson)
  • Implement linux-baseline os-10 #100 (mcgege)
  • Style Guide corrections #98 (mcgege)
  • Update module metadata #97 (mcgege)
  • Baseline sysctl-17: Enable logging of martian packets #96 (mcgege)
  • One single coredump parameter #95 (mcgege)
  • Fix for Linux Baseline os-02 #94 (mcgege)
  • Baseline os-05b: set SYS_[GU]ID_[MIN|MAX] in /etc/login.defs #92 (mcgege)
  • Remove config/scripts to prevent core dumps if function is disabled… #91 (mcgege)
  • DevSec Linux Baseline os-05 #90 (mcgege)
  • Corrected handling of /bin/su (via allow_change_user) #89 (mcgege)
  • Documentation update #88 (mcgege)
  • added switch manage_ipv6, so people could disable managing of ipv6 co… #87 (STetzel)
  • CentOS7 issue - revert "Remove link following in minimize_access file resource" #86 (mcgege)
  • Making rubocop happy #85 (artem-sidorenko)
  • Make the sysctl setting 'rp_filter' configurable #84 (mcgege)
  • Quick fix for issue #71: remove '/usr/local/bin' from managed folders #83 (mcgege)
  • Puppet-lint done for sysctl.pp #81 (bitvijays)
  • Fix the CI #80 (artem-sidorenko)
  • Adopt Puppet style guide - remove dynamic variable lookup #70 (tuxmea)
  • Remove link following in minimize_access file resource #64 (rooprob)
  • update common kitchen.yml platforms #63 (chris-rock)
  • add support for limiting password re-use. #61 (igoraj)
  • add local testing section to readme #59 (chris-rock)
  • add net.ipv6.conf.default.accept_ra. closes #56 #58 (igoraj)
  • Disable System Accounts #54 (igoraj)
  • common files: add centos 7 #53 (arlimus)
Assets 2
Loading