Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

add possibility to run ssh_hardening as unprivileged user #561

Merged
merged 12 commits into from
Aug 15, 2022
Merged

add possibility to run ssh_hardening as unprivileged user #561

merged 12 commits into from
Aug 15, 2022

Conversation

schurzi
Copy link
Contributor

@schurzi schurzi commented Aug 10, 2022

Signed-off-by: Martin Schurz Martin.Schurz@t-systems.com

schurzi added 3 commits August 10, 2022 20:34
@schurzi
add VM tests for ssh_hardening
23d1c06 
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
@schurzi
remove VM tests from ssh_hardening
9c62371 
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
@schurzi
run ssh_hardening test as unprivileged user
96ca138 
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
@schurzi
add link for documentation
21487ea 
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
@schurzi schurzi changed the title add VM tests for ssh_hardening add posibility to run ssh_hardening as unprivileged user Aug 11, 2022
schurzi added 7 commits August 11, 2022 10:31
@schurzi
use different config
94ca69b 
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
@schurzi
remove become
6a0226d 
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
@schurzi
re-add become
0d07442 
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
@schurzi
move become into role
e869c60 
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
@schurzi
indentation
d5480b2 
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
@schurzi
try args apply
3c1c162 
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
@schurzi
fix linting
6293ba0 
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
@schurzi schurzi marked this pull request as ready for review August 14, 2022 11:09
@schurzi schurzi requested a review from rndmh3ro August 14, 2022 11:09
@schurzi schurzi mentioned this pull request Aug 14, 2022
Closed
@schurzi schurzi linked an issue Aug 14, 2022 that may be closed by this pull request
Replace default 2048 bits RSA keypair fails on Ubuntu 20.04 #459
Closed
@rndmh3ro
Copy link
Member

We should probably add some docs about this.
"As this role requires root-privileges, we added "become" to all tasks. So please make sure you run the role as root or as a user with become-privs" - or something like that.

@schurzi
add documentation
9a1280b 
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
@rndmh3ro rndmh3ro merged commit a806ec8 into master Aug 15, 2022
@rndmh3ro rndmh3ro deleted the ssh_vm branch August 15, 2022 11:19
@schurzi schurzi changed the title add posibility to run ssh_hardening as unprivileged user add possibility to run ssh_hardening as unprivileged user Apr 14, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@rndmh3ro rndmh3ro rndmh3ro approved these changes

Assignees
No one assigned
Labels
enhancement minor ssh_hardening
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Replace default 2048 bits RSA keypair fails on Ubuntu 20.04
2 participants
@schurzi @rndmh3ro