- Release-announce - lists.openstack.org

openstack-ansible-security 14.0.6 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We are psyched to announce the release of: openstack-ansible-security 14.0.6: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.0.5..14.0.6 ---------------------------------------------------- bf463a0 Add libxslt headers to bindep 2d07959 Fix issues from new CentOS 7 release Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 ++ tasks/auditd.yml | 2 +- 3 files changed, 9 insertions(+), 3 deletions(-)

1 0

openstack-ansible-security 15.1.1 (ocata)
by no-reply＠openstack.org 26 May '17

26 May '17

We exuberantly announce the release of: openstack-ansible-security 15.1.1: OpenStack-Ansible: Host security hardening This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 15.1.0..15.1.1 ---------------------------------------------------- 77aec08 Change PASS_WARN_DAYS --> PASS_WARN_AGE Diffstat (except docs and test files) ------------------------------------- tasks/rhel6stig/auth.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

openstack-ansible-security 14.1.1 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We are ecstatic to announce the release of: openstack-ansible-security 14.1.1: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.1.0..14.1.1 ---------------------------------------------------- 83e3c20 Fix issues from new CentOS 7 release 86cc144 Unblock security role gate 4702320 Enable ntp client functionality with chronyd Diffstat (except docs and test files) ------------------------------------- tasks/auditd.yml | 11 +++++++++++ tasks/file_perms.yml | 4 ++++ templates/chrony.conf.j2 | 5 +++-- templates/osas-auditd.j2 | 6 ++++++ 5 files changed, 25 insertions(+), 2 deletions(-)

1 0

openstack-ansible-security 15.1.0 (ocata)
by no-reply＠openstack.org 26 May '17

26 May '17

We are stoked to announce the release of: openstack-ansible-security 15.1.0: OpenStack-Ansible: Host security hardening This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 15.1.0 ^^^^^^ Security Issues * The security role will no longer fix file permissions and ownership based on the contents of the RPM database by default. Deployers can opt in for these changes by setting "security_reset_perm_ownership" to "yes". * The tasks that search for ".shosts" and "shosts.equiv" files (STIG ID: RHEL-07-040330) are now skipped by default. The search takes a long time to complete on systems with lots of files and it also causes a significant amount of disk I/O while it runs. Changes in openstack-ansible-security 15.0.0..15.1.0 ---------------------------------------------------- 032d98f Rename vars/common.yml to vars/main.yml e7dc4ee Enable ntp client functionality with chronyd 160cb80 Make .shosts search/removal opt in 3bc5432 Disable file perm/ownership reset Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 4 +- ...-rpm-perms-fix-by-default-b164e39717f0ada7.yaml | 6 + ...shosts-file-search-opt-in-887f600a79eef07e.yaml | 7 + tasks/main.yml | 5 - templates/chrony.conf.j2 | 5 +- vars/common.yml | 337 --------------------- vars/main.yml | 331 +++++++++++++++++++- 10 files changed, 354 insertions(+), 364 deletions(-)

1 0

openstack-ansible-security 13.3.7
by no-reply＠openstack.org 26 May '17

26 May '17

We are overjoyed to announce the release of: openstack-ansible-security 13.3.7: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.7 ---------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 14.0.8 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We are chuffed to announce the release of: openstack-ansible-security 14.0.8: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.0.5..14.0.8 ---------------------------------------------------- bf463a0 Add libxslt headers to bindep 2d07959 Fix issues from new CentOS 7 release Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 ++ tasks/auditd.yml | 2 +- 3 files changed, 9 insertions(+), 3 deletions(-)

1 0

openstack-ansible-security 13.3.16
by no-reply＠openstack.org 26 May '17

26 May '17

We enthusiastically announce the release of: openstack-ansible-security 13.3.16: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.14..13.3.16 ------------------------------------------------------ 65b28f9 Make all tests use upper-constraints 4664346 Use stable/mitaka branch when cloning plugins repo Diffstat (except docs and test files) ------------------------------------- tox.ini | 19 ++----------------- 1 file changed, 2 insertions(+), 17 deletions(-)

1 0

openstack-ansible-security 13.3.18
by no-reply＠openstack.org 26 May '17

26 May '17

We are jazzed to announce the release of: openstack-ansible-security 13.3.18: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.14..13.3.18 ------------------------------------------------------ 65b28f9 Make all tests use upper-constraints 4664346 Use stable/mitaka branch when cloning plugins repo Diffstat (except docs and test files) ------------------------------------- tox.ini | 19 ++----------------- 1 file changed, 2 insertions(+), 17 deletions(-)

1 0

openstack-ansible-security 14.0.4 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We joyfully announce the release of: openstack-ansible-security 14.0.4: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.0.3..14.0.4 ---------------------------------------------------- 4251bc5 Backport of package optimization Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 4 +- .../chrony-config-variable-7a1a7862c05c9675.yaml | 5 + tasks/aide.yml | 23 ---- tasks/apt.yml | 32 +++++ tasks/auditd.yml | 32 ----- tasks/auth.yml | 75 ----------- tasks/lsm.yml | 31 ----- tasks/mail.yml | 20 --- tasks/misc.yml | 48 +------ tasks/rpm.yml | 41 ++++-- tasks/services.yml | 145 --------------------- tox.ini | 2 +- vars/redhat.yml | 55 ++++++++ vars/ubuntu.yml | 56 ++++++++ 15 files changed, 196 insertions(+), 380 deletions(-)

1 0

openstack-ansible-security 14.0.3 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We are pumped to announce the release of: openstack-ansible-security 14.0.3: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.0.1..14.0.3 ---------------------------------------------------- 5e8714c Replace github with git.o.o Diffstat (except docs and test files) ------------------------------------- README.md | 2 +- bindep.txt | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-)

1 0