mirror of
https://github.com/hanzo-io/cloud.git
synced 2026-11-02 17:30:47 +00:00
Balamurali MandGitHub
f90fba7c66
* feat(Hardening): Add playbooks for sshd hardening & warning banners * feat(hardening): Enable ASLR & remove prelink * feat(hardening): Add playbooks for PAM configuration * feat(harden): Add playbook to setup AIDE This will add cron job in cron.daily for ubuntu * feat(hardening): Add playbook for auditd Only package name seems to be different from centOS playbook * feat(hardening): Add playbook to check gpg file * feat: Add main playbook for hardening
56 lines
1.2 KiB
YAML
56 lines
1.2 KiB
YAML
---
|
|
- name: "Ensure message of the day is configured properly"
|
|
copy:
|
|
src: motd.j2
|
|
dest: /etc/motd
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
|
|
- name: "Ensure local login warning banner is configured properly"
|
|
copy:
|
|
src: issue.j2
|
|
dest: /etc/issue
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
|
|
- name: "Ensure remote login warning banner is configured properly"
|
|
copy:
|
|
src: issue.j2
|
|
dest: /etc/issue.net
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
|
|
- name: "Ensure remote login warning banner is configured for ssh"
|
|
copy:
|
|
src: issue.j2
|
|
dest: /etc/login.warn
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
|
|
- name: "Ensure permissions on /etc/motd are configured"
|
|
file:
|
|
dest: /etc/motd
|
|
state: file
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
|
|
- name: "Ensure permissions on /etc/issue are configured"
|
|
file:
|
|
dest: /etc/issue
|
|
state: file
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
|
|
- name: "Ensure permissions on /etc/issue.net are configured"
|
|
file:
|
|
dest: /etc/issue.net
|
|
state: file
|
|
owner: root
|
|
group: root
|
|
mode: 0644 |