From 993b0a3a2e40586a48dbaff7b9901073a16133f4 Mon Sep 17 00:00:00 2001 From: Sebastian Gumprich Date: Mon, 20 Nov 2017 13:47:25 +0100 Subject: [PATCH] remove uselogin-check --- .travis.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.travis.yml b/.travis.yml index 62390aec..7d5d9494 100644 --- a/.travis.yml +++ b/.travis.yml @@ -57,7 +57,8 @@ script: - 'docker exec "$(cat ${container_id})" ansible-playbook /etc/ansible/roles/ansible-ssh-hardening/default.yml' # Verify role - - 'inspec exec https://github.com/dev-sec/ssh-baseline/ -t docker://$(cat ${container_id})' + # remove the UseLogin-check, see here for reasons: https://github.com/dev-sec/ansible-ssh-hardening/pull/141 + - 'inspec exec https://github.com/dev-sec/ssh-baseline/ -t docker://$(cat ${container_id}) --controls=sshd-01 sshd-02 sshd-03 sshd-04 sshd-05 sshd-06 sshd-07 sshd-08 sshd-09 sshd-10 sshd-11 sshd-12 sshd-13 sshd-14 sshd-16 sshd-17 sshd-18 sshd-19 sshd-20 sshd-21 sshd-22 sshd-23 sshd-24 sshd-25 sshd-26 sshd-27 sshd-28 sshd-29 sshd-30 sshd-31 sshd-32 sshd-33 sshd-34 sshd-35 sshd-36 sshd-37 sshd-38 sshd-39 sshd-40' notifications: webhooks: https://galaxy.ansible.com/api/v1/notifications/