ansible-os-hardening 4.3.0

4.3.0 (2018-01-03)

Full Changelog

Implemented enhancements:

• Update some RH settings in this role #155
• Removal of core dump hardening configuration if core dumps are allowed #129
• Don't create home for system accounts #156 (oakey-b1)
• Prevent disabling of filesystems via whitelist #153 (pinguinkiste)
• Add kernel hardening settings from Ubuntu /etc/sysctl.d #150 (kravietz)
• Removal of core dump hardening configuration if core dumps are allowed #146 (martinbydefault)
• add missing sysctl parameter #143 (rndmh3ro)
• update readme #139 (rndmh3ro)

Fixed bugs:

• bug in ufw.j2 template #151
• os_security_kernel_enable_sysrq is not implemented #115
• replace single ticks with double ticks. fix #151 #152 (rndmh3ro)
• fixed tag #149 (martinbydefault)

Closed issues:

• ansible hardening fails on ubuntu 16.04 with msg": "ERROR! 'sysctl_rhel_config' is undefined #147
• Enhancement: Test with TestInfra and Molecule #128

Merged pull requests:

• move defaults to os-specific vars #157 (rndmh3ro)