openstack
/
ansible-hardening
Code Issues Proposed changes
Ansible role for security hardening
754 Commits 9 Branches 140 Tags 5.3 MiB
Jinja 44.5%
Python 41.2%
Shell 14.3%
Go to file
Markos Chandras f422da8599 Add support for the openSUSE Leap distributions 
Add support for the openSUSE Leap distributions. The security rules
are similar to the RedHat and Ubuntu ones. We also replace
ansible_os_family with ansible_pkg_mgr since the former does not
return consistent results across different SUSE distributions especially
on older Ansible versions.

Change-Id: I20ffe17039bb641aad70d8123f0b7e7417a42cba
 		2017-06-27 15:43:53 +01:00
defaults Actually set min/max password lifetime for account 2017-06-13 06:32:47 +00:00
doc Add support for the openSUSE Leap distributions 2017-06-27 15:43:53 +01:00
files Add support for the openSUSE Leap distributions 2017-06-27 15:43:53 +01:00
handlers Do not update grub if grub not used 2017-04-13 12:34:22 +00:00
library Verify password age limits [+Docs] 2016-12-08 09:44:23 -06:00
meta Add support for the openSUSE Leap distributions 2017-06-27 15:43:53 +01:00
releasenotes Add release note for password lifetime patches 2017-06-13 06:33:04 +00:00
tasks Add support for the openSUSE Leap distributions 2017-06-27 15:43:53 +01:00
templates [Docs] Replace security role references 2017-06-12 18:59:28 +00:00
tests Sync test files with the openstack-ansible-tests repository 2017-06-27 13:25:35 +01:00
vars Add support for the openSUSE Leap distributions 2017-06-27 15:43:53 +01:00
.gitignore Sync test files with the openstack-ansible-tests repository 2017-06-27 13:25:35 +01:00
.gitreview Fix .gitreview 2017-05-30 18:27:52 +00:00
LICENSE Initial import of openstack-ansible-security role 2015-10-07 07:27:39 -05:00
README.md Add support for the openSUSE Leap distributions 2017-06-27 15:43:53 +01:00
README.rst [Docs] Replace security role references 2017-06-12 18:59:28 +00:00
Vagrantfile Sync test files with the openstack-ansible-tests repository 2017-06-27 13:25:35 +01:00
bindep.txt Initial Fedora 25 support 2017-05-31 13:33:34 +00:00
manual-test.rc Use centralised test scripts 2016-09-28 12:16:50 +01:00
run_tests.sh Sync test files with the openstack-ansible-tests repository 2017-06-27 13:25:35 +01:00
setup.cfg [Docs] Replace security role references 2017-06-12 18:59:28 +00:00
setup.py Updated from global requirements 2017-03-02 11:52:32 +00:00
test-requirements.txt Updated from global requirements 2017-05-17 03:55:45 +00:00
tox.ini Merge "Ensure that role tests pin pip/setuptools/wheel" 2017-06-13 06:55:30 +00:00

README.md

ansible-hardening

ansible-hardening-logo

The ansible-hardening role applies security hardening configurations from the Security Technical Implementation Guide (STIG) to systems running the following distributions:

  • CentOS 7
  • Debian Jessie (experimental)
  • Fedora 25 (experimental)
  • Ubuntu 14.04 (deprecated)
  • Ubuntu 16.04
  • Red Hat Enterprise Linux 7
  • openSUSE Leap 42.2 and 42.3
  • SUSE Linux Enterprise 12 (experimental)

For more details, review the ansible-hardening documentation.

Requirements

This role can be used with or without OpenStack-Ansible. It requires Ansible 2.3 or later.

Role Variables

All of the variables for this role are in defaults/main.yml.

Dependencies

This role has no dependencies.

Example Playbook

Using the role is fairly straightforward:

- hosts: servers
  roles:
     - ansible-hardening

Running with Vagrant

This role can be tested easily on multiple platforms using Vagrant.

The Vagrantfile supports testing on:

  • Ubuntu 14.04
  • Ubuntu 16.04
  • CentOS 7

To test on all platforms:

vagrant destroy --force && vagrant up

To test on Ubuntu 14.04 only:

vagrant destroy ubuntu1404 --force && vagrant up ubuntu1404

To test on Ubuntu 16.04 only:

vagrant destroy ubuntu1604 --force && vagrant up ubuntu1604

To test on CentOS 7 only:

vagrant destroy centos7 --force && vagrant up centos7

License

Apache 2.0

Author Information

For more information, join #openstack-ansible on Freenode.