github dev-sec/ansible-collection-hardening 7.1.0

latest releases: 10.1.0, 10.0.0, 9.0.1...
3 years ago

Changelog

7.1.0 (2021-02-02)

Full Changelog

Implemented enhancements:

  • Default value for ssh_max_startups should be changed #366
  • Comment in configuration files should state which collection was there #345
  • Error on applying the sysctl vars on Debian Jessy #230
  • add Support for OpenSSH HostCertificate config option #380 (mpraeger)
  • Syncookie #372 (joubbi)
  • Sorted sysctl values and lists in READMEs alphabetically (No functional changes). #371 (joubbi)
  • make auditd 'max_log_file' configurable #370 (tgueldner-mms)
  • reduce maximum unauthenticated ssh sessions #368 (schurzi)
  • add a runtime.yml to declare minimum ansible version #363 (rndmh3ro)
  • change inclusion of os specific defaults #353 (schurzi)
  • make the os_env_umask variable usable #351 (sprat)
  • Fix #348: make ssh configuration files paths configurable #350 (sprat)
  • Removed Protocol statement in later versions of sshd, since the code … #342 (joubbi)
  • Improvements of comments in opensshd.conf.j2 #338 #339 (joubbi)

Fixed bugs:

  • Comments in opensshd.conf.j2 should be improved #338
  • check for correct cpu vendor in initramfs-tools #374 (schurzi)
  • set hidepid=0 on RHEL/CentOS 7 #369 (schurzi)

Closed issues:

  • initramfs-tools modules.j2 does not seem to be able to detect AMD CPUs #373
  • How do i install this on Centos 8? #367
  • hidepid=2 gives error when running systemctl on EL7 #364
  • Allow putting the ssh/sshd config in alternative files #348
  • os_env_umask has no effect #344
  • Don't modify /etc/sysctl.conf #343

Merged pull requests:

* This Changelog was automatically generated by github_changelog_generator

Don't miss a new ansible-collection-hardening release

NewReleases is sending notifications on new releases.