- Release-announce - lists.openstack.org

openstack-ansible-security 14.2.2 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We are jazzed to announce the release of: openstack-ansible-security 14.2.2: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.1.1..14.2.2 ---------------------------------------------------- 5f49ce1 Add missing STIG ID tags e7185d2 Install python2-pyOpenSSL package on CentOS dd52e48 Prepare vagrant centos/7 box for role testing 2a2b1e6 Fix auditd restart handler d97e7b8 Add conf file entry for chrony Diffstat (except docs and test files) ------------------------------------- Vagrantfile | 9 +++++++++ bindep.txt | 2 +- handlers/main.yml | 11 +++++++---- tasks/misc.yml | 10 +++++++++- vars/redhat.yml | 1 + vars/ubuntu.yml | 1 + 8 files changed, 38 insertions(+), 6 deletions(-)

1 0

openstack-ansible-security 13.3.11
by no-reply＠openstack.org 26 May '17

26 May '17

We are satisfied to announce the release of: openstack-ansible-security 13.3.11: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.11 ----------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 13.2.0
by no-reply＠openstack.org 26 May '17

26 May '17

We enthusiastically announce the release of: openstack-ansible-security 13.2.0: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below.

1 0

openstack-ansible-security 13.3.17
by no-reply＠openstack.org 26 May '17

26 May '17

We enthusiastically announce the release of: openstack-ansible-security 13.3.17: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.14..13.3.17 ------------------------------------------------------ 65b28f9 Make all tests use upper-constraints 4664346 Use stable/mitaka branch when cloning plugins repo Diffstat (except docs and test files) ------------------------------------- tox.ini | 19 ++----------------- 1 file changed, 2 insertions(+), 17 deletions(-)

1 0

openstack-ansible-security 14.0.2 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We eagerly announce the release of: openstack-ansible-security 14.0.2: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.0.1..14.0.2 ---------------------------------------------------- 5e8714c Replace github with git.o.o Diffstat (except docs and test files) ------------------------------------- README.md | 2 +- bindep.txt | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-)

1 0

openstack-ansible-security 13.3.8
by no-reply＠openstack.org 26 May '17

26 May '17

We are overjoyed to announce the release of: openstack-ansible-security 13.3.8: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.8 ---------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 13.1.4
by no-reply＠openstack.org 26 May '17

26 May '17

We are pumped to announce the release of: openstack-ansible-security 13.1.4: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 13.1.4 ^^^^^^ New Features ************ * The audit rules added by the security role now have key fields that make it easier to link the audit log entry to the audit rule that caused it to appear. Bug Fixes ********* * The role previously did not restart the audit daemon after generating a new rules file. The bug (https://launchpad.net/bugs/1590916) has been fixed and the audit daemon will be restarted after any audit rule changes. * When the security role was run in Ansible's check mode and a tag was provided, the "check_mode" variable was not being set. Any tasks which depend on that variable would fail. This bug is fixed (https://bugs.launchpad.net/openstack-ansible/+bug/1590086) and the "check_mode" variable is now set properly on every playbook run.

1 0

openstack-ansible-security 12.0.14
by no-reply＠openstack.org 26 May '17

26 May '17

We are stoked to announce the release of: openstack-ansible-security 12.0.14: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 12.0.14 ^^^^^^^ Bug Fixes * The dictionary-based variables in "defaults/main.yml" are now individual variables. The dictionary-based variables could not be changed as the documentation instructed. Instead it was required to override the entire dictionary. Deployers must use the new variable names to enable or disable the security configuration changes applied by the security role. For more information, see Launchpad Bug 1577944 (https://bugs.launchpad.net/openstack- ansible/+bug/1577944). * Failed access logging is now disabled by default and can be enabled by changing "security_audit_failed_access" to "yes". The rsyslog daemon checks for the existence of log files regularly and this audit rule was triggered very frequently, which led to very large audit logs. * The security role now handles "ssh_config" files that contain "Match" stanzas. A marker is added to the configuration file and any new configuration items will be added below that marker. In addition, the configuration file is validated for each change to the ssh configuration file.

1 0

openstack-ansible-security 13.3.12
by no-reply＠openstack.org 26 May '17

26 May '17

We are psyched to announce the release of: openstack-ansible-security 13.3.12: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.12 ----------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 13.3.14
by no-reply＠openstack.org 26 May '17

26 May '17

We are chuffed to announce the release of: openstack-ansible-security 13.3.14: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.14 ----------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0