Skip to content

Releases: dev-sec/puppet-os-hardening

puppet-os-hardening 2.2.6

24 Jul 12:35
Compare
Choose a tag to compare

Implemented enhancements:

  • Proxy support / SUSE fixes #217 (mcgege)
  • Updates from pdk template 1.11.1 #215 (mcgege)
  • Metadata / Travis fixes #211 (mcgege)
  • CIS: Fix permissions on home cron and log dirs #203 (PenguinFreeDom)

Fixed bugs:

  • Approve stdlib v6 + resolve librarian-puppet problem #213

Closed issues:

  • Error: no implicit conversion of Integer into String #199

Merged pull requests:

  • allow puppet-stdlib v6 #219 (mcgege)
  • OpenSUSE 42.3 docker image correction #214 (mcgege)

puppet-os-hardening 2.2.5

01 Jun 13:30
Compare
Choose a tag to compare

Fixed bugs:

  • Augeas sysctl needs explicit string value #207 (mcgege)

Merged pull requests:

  • Kitchen fix #206 (mcgege)
  • Some applications require different setting for icmp_ratelimit #204 (tuxmea)

puppet-os-hardening 2.2.4

01 May 08:02
Compare
Choose a tag to compare

Implemented enhancements:

  • Adjust .travis.yml to PDK template #197 (mcgege)

Fixed bugs:

  • Add dirs to exclude to .pdkignore #196 (mcgege)

puppet-os-hardening 2.2.3

01 May 06:39
Compare
Choose a tag to compare

Implemented enhancements:

  • Integration tests with DigitalOcean (see #180) #194 (mcgege)
  • Update to PDK 1.9.1 #191 (mcgege)
  • Update to PDK 1.9.0 #190 (mcgege)

Merged pull requests:

  • Update to PDK 1.10.0 #193 (mcgege)

puppet-os-hardening 2.2.2

28 Feb 07:59
Compare
Choose a tag to compare

Implemented enhancements:

  • Readme updates #188 (mcgege)
  • Replace sysctl module #183 (mcgege)
  • Add version tag on puppetforge #182 (mcgege)

Fixed bugs:

  • Wrong permission on module files #175
  • Add missing dependency #184 (theosotr)

Merged pull requests:

  • Replace Gitter with mailing lists #185 (mcgege)

puppet-os-hardening 2.2.1

28 Jan 13:49
Compare
Choose a tag to compare

Merged pull requests:

  • Bugfix script to change file + dir permissions for Puppet Forge build #176 (mcgege)

puppet-os-hardening 2.2.0

27 Jan 10:16
Compare
Choose a tag to compare

Implemented enhancements:

  • Test / Update for Puppet 6 #156
  • Update test mechanisms #169 (mcgege)
  • New option rpfilter_loose to enable loose mode (rp_filter = 2) #163 (mcgege)

Fixed bugs:

  • Rhel 7 won't boot on physical server #165

Closed issues:

  • Wrong permission on git project files ? #164
  • module on the forge is not in sync with version of github #160
  • Fix broken tests in Travis CI #123

Merged pull requests:

  • Also works with current puppetlabs/stdlib (5.1.0 tested) #168 (mcgege)
  • Do not disable vfat. Fixes #165. #166 (timstoop)
  • Add support for Ubuntu 18.04 and SLES 15 in metadata.json #162 (mcgege)

puppet-os-hardening 2.1.3

12 Nov 11:27
Compare
Choose a tag to compare

Implemented enhancements:

  • Support os umask #152 (hdep)
  • Easy add and remove packages, disable services #138 (timstoop)

Closed issues:

  • user resource conflict with puppetlabs/apache: Duplicate declaration: User[www-data] is already declared #157
  • Missing comments in managed file : file managed by puppet #146
  • Missing requirements in readme file #145

Merged pull requests:

  • Update issue templates #158 (rndmh3ro)
  • rework README #155 (mcgege)
  • Create license file #154 (mcgege)
  • Create license file #153 (mcgege)
  • Add 'MANAGED BY PUPPET' header #150 (hdep)
  • Fix missing Requirements in Readme #149 (hdep)
  • Add OpenSUSE 15 to the supported distributions #148 (mcgege)

puppet-os-hardening 2.1.2

15 Aug 11:03
Compare
Choose a tag to compare

Implemented enhancements:

  • Deploy GRUB hardening #137 (timstoop)
  • Only allow root and members of group wheel to use su #134 (timstoop)
  • Fix permissions on /etc/gshadow, based on CIS DIL Benchmark 6.1.5. #133 (timstoop)

Merged pull requests:

  • Add stricter file permissions + PE fix #136 (mcgege)

puppet-os-hardening 2.1.1

17 May 06:22
Compare
Choose a tag to compare

Implemented enhancements:

  • Convert module into "standardized PDK module" #107
  • Adding new param to specify maildir path. Updated nologin path for Re… #127 (hundredacres)
  • converted module to pdk #107 #120 (enemarke)

Closed issues:

  • net.ipv4.tcp_rfc1337 not a valid sysctl key #124

Merged pull requests:

  • Add password_warn_age parameter for login.defs #128 (claw-real)
  • CI: switch testing to DigitalOcean #126 (artem-sidorenko)
  • Refactoring and new spec test #121 (enemarke)