Open Stack

We are jazzed to announce the release of:

ansible-hardening 15.1.11: OpenStack-Ansible: Host security hardening

This release is part of the ocata release series.

Download the package from:

    https://tarballs.openstack.org/ansible-hardening/

For more details, please see below.

15.1.11
^^^^^^^

Bug Fixes

* The sysctl configuration task was not skipping configurations
  where "enabled" was set to "no". Instead, it was removing
  configurations when "enabled: no" was set.

  There is now a fix in place that ensures any sysctl configuration
  with "enabled: no" will be skipped and the configuration will be
  left unaltered on the system.

Changes in ansible-hardening 15.1.9..15.1.11
--------------------------------------------

6e82b64 Cast security_shadow_utils_fail_delay as int
d0ec2e8 Configure pam_faildelay on Ubuntu
46ff2e5 Updated from OpenStack Ansible Tests
10672ae Skip sysctl configs when enabled: no


Diffstat (except docs and test files)
-------------------------------------

.gitignore                                         |  9 +--
Vagrantfile                                        | 62 ++++++---------
bindep.txt                                         | 37 ++++++---
...skip-sysctl-when-disabled-b32eca48df5b1437.yaml | 10 +++
tasks/rhel7stig/auth.yml                           | 18 +++++
tasks/rhel7stig/kernel.yml                         |  2 +
vars/main.yml                                      | 10 ++-
8 files changed, 132 insertions(+), 103 deletions(-)