openstack/ansible-hardening
Code Issues Proposed changes
Files
6fbe43adf1771a9c8201498baedc81f5d3d0a95f
ansible-hardening/doc/source/developer-notes
History
Major Hayden 6fbe43adf1 Allow AppArmor to be enabled 
This patch is a modified backport of the following two master commits:

  * Ia017f12be0d60ea74b54396bc8278e4db92295ba
  * Iae976f283df77556a71833f857a906097e6f8aeb

A clean backport isn't possible because master has some configuration for
SELinux, which doesn't make sense for Mitaka/Liberty. Also, master has
the LSM enabled by default and this change could be disruptive in a
stable release. It is now disabled by default in the backport.

Change-Id: Ia673c3634d719f16b324a0e8473ebca7ebf336fb
(cherry picked from commit 744e9b9ca7)
2016-06-14 12:12:38 +00:00
..
V-38437.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38438.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38439.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38443.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38444.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38445.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38446.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38447.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38448.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38449.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38450.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38451.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38452.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38453.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38454.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38455.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38456.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38457.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38458.rst
V-38458: /etc/group user ownership
2015-10-09 16:15:57 -05:00
V-38459.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38460.rst
Fix typo in documentation for V-38460
2015-10-07 15:35:54 -07:00
V-38461.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38462.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38463.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38464.rst
Removing equal signs in docs
2016-05-09 12:23:37 +00:00
V-38465.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38466.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38467.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38468.rst
Removing equal signs in docs
2016-05-09 12:23:37 +00:00
V-38469.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38470.rst
Removing equal signs in docs
2016-05-09 12:23:37 +00:00
V-38471.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38472.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38473.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38474.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38475.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38476.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38477.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38478.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38479.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38480.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38481.rst
Doc updates
2016-05-06 13:41:03 +00:00
V-38482.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38483.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38484.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38486.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38487.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38488.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38489.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38490.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38491.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38492.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38493.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38494.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38495.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38496.rst
V-38496: Lock system accounts other than root
2015-10-14 13:43:24 +00:00
V-38497.rst
Doc updates
2016-05-06 13:41:03 +00:00
V-38498.rst
Fix auditd log permission bug
2016-05-24 16:17:32 +00:00
V-38499.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38500.rst
V-38500: No UID 0 accounts except root
2015-10-14 13:43:28 +00:00
V-38501.rst
V-38501, V-38573: Disable accounts after failed logins
2015-10-16 11:27:25 -05:00
V-38502.rst
V-3850{2,3,4}: Ownership/mode of /etc/shadow
2015-10-09 10:31:01 -05:00
V-38503.rst
V-3850{2,3,4}: Ownership/mode of /etc/shadow
2015-10-09 10:31:01 -05:00
V-38504.rst
V-3850{2,3,4}: Ownership/mode of /etc/shadow
2015-10-09 10:31:01 -05:00
V-38511.rst
V-3851{1,2,3}, V-38686: IPv4 security controls
2015-10-14 13:43:37 +00:00
V-38512.rst
V-3851{1,2,3}, V-38686: IPv4 security controls
2015-10-14 13:43:37 +00:00
V-38513.rst
V-3851{1,2,3}, V-38686: IPv4 security controls
2015-10-14 13:43:37 +00:00
V-38514.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38515.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38516.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38517.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38518.rst
V-3851{8,9}: Log file ownership
2015-10-08 10:42:01 -05:00
V-38519.rst
V-3851{8,9}: Log file ownership
2015-10-08 10:42:01 -05:00
V-38520.rst
V-3852{0,1}: Back up log/audit records
2015-10-07 14:53:54 -05:00
V-38521.rst
V-3852{0,1}: Back up log/audit records
2015-10-07 14:53:54 -05:00
V-38522.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38523.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38524.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38525.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38526.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38527.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38528.rst
V-38528: Log martian packets
2015-10-07 15:48:42 -05:00
V-38529.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38530.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38531.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38532.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38533.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38534.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38535.rst
V-38535: Don't respond to ICMPv4 broadcast
2015-10-08 15:48:03 -05:00
V-38536.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38537.rst
V-38537: Ignore ICMPv4 bogus error messages
2015-10-07 15:52:12 -05:00
V-38538.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38539.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38540.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38541.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38542.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38543.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38544.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38545.rst
Adding notes for V-385{43,45,54,80}
2015-11-05 09:04:10 -06:00
V-38546.rst
V-38546: Disable IPv6 system-wide
2015-10-15 07:50:33 -05:00
V-38547.rst
Disable chmod auditd rules
2016-01-20 12:55:00 -06:00
V-38548.rst
V-3854{8,9}, V-38553: IPv6 filtering/security
2015-10-07 16:24:10 -05:00
V-38549.rst
V-3854{8,9}, V-38553: IPv6 filtering/security
2015-10-07 16:24:10 -05:00
V-38550.rst
Disable chmod auditd rules
2016-01-20 12:55:00 -06:00
V-38551.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38552.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38553.rst
V-3854{8,9}, V-38553: IPv6 filtering/security
2015-10-07 16:24:10 -05:00
V-38554.rst
Adding notes for V-385{43,45,54,80}
2015-11-05 09:04:10 -06:00
V-38555.rst
V-38555, V-38560: IPv4 firewalling
2015-10-07 16:28:50 -05:00
V-38556.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38557.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38558.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38559.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38560.rst
V-38555, V-38560: IPv4 firewalling
2015-10-07 16:28:50 -05:00
V-38561.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38563.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38565.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38566.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38567.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38568.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38569.rst
V-385{69,70,71,72}: Password requirements
2015-10-07 16:32:43 -05:00
V-38570.rst
V-385{69,70,71,72}: Password requirements
2015-10-07 16:32:43 -05:00
V-38571.rst
V-385{69,70,71,72}: Password requirements
2015-10-07 16:32:43 -05:00
V-38572.rst
V-385{69,70,71,72}: Password requirements
2015-10-07 16:32:43 -05:00
V-38573.rst
V-38501, V-38573: Disable accounts after failed logins
2015-10-16 11:27:25 -05:00
V-38574.rst
V-3857{4,6,7}: Password hashing algorithms
2015-10-29 10:18:11 -05:00
V-38575.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38576.rst
V-3857{4,6,7}: Password hashing algorithms
2015-10-29 10:18:11 -05:00
V-38577.rst
V-3857{4,6,7}: Password hashing algorithms
2015-10-29 10:18:11 -05:00
V-38578.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38579.rst
V-38579: grub.conf owned by root
2015-10-07 16:39:57 -05:00
V-38580.rst
Adding notes for V-385{43,45,54,80}
2015-11-05 09:04:10 -06:00
V-38581.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38582.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38583.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38584.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38585.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38586.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38587.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38588.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38589.rst
V-386**: Disabling various unneeded services
2015-10-14 12:42:56 -05:00
V-38590.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38591.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38592.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38593.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38594.rst
V-386**: Disabling various unneeded services
2015-10-14 12:42:56 -05:00
V-38595.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38596.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38597.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38598.rst
V-386**: Disabling various unneeded services
2015-10-14 12:42:56 -05:00
V-38599.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38600.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38601.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38602.rst
V-386**: Disabling various unneeded services
2015-10-14 12:42:56 -05:00
V-38603.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38604.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38605.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38606.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38607.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38608.rst
Removing equal signs in docs
2016-05-09 12:23:37 +00:00
V-38609.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38610.rst
Removing equal signs in docs
2016-05-09 12:23:37 +00:00
V-38611.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38612.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38613.rst
Removing equal signs in docs
2016-05-09 12:23:37 +00:00
V-38614.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38615.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38616.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38617.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38618.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38619.rst
Doc updates
2016-05-06 13:41:03 +00:00
V-38620.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38621.rst
V-38621: System clock sync
2015-10-09 13:24:52 -05:00
V-38622.rst
V-38622: Restricted mail relaying
2015-10-14 12:54:39 -05:00
V-38623.rst
V-38623: rsyslog file permissions
2015-10-15 07:43:48 -05:00
V-38624.rst
V-38624: Rotate logs
2015-10-08 09:19:41 -05:00
V-38625.rst
V-3862{5,6,7}: LDAP server security
2015-10-07 17:08:23 -05:00
V-38626.rst
V-3862{5,6,7}: LDAP server security
2015-10-07 17:08:23 -05:00
V-38627.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38628.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38629.rst
Graphical login exceptions
2015-10-08 10:16:21 -05:00
V-38630.rst
Graphical login exceptions
2015-10-08 10:16:21 -05:00
V-38631.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38632.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38633.rst
V-3863{3,4,6}: Audit log files
2015-10-08 09:56:02 -05:00
V-38634.rst
V-3863{3,4,6}: Audit log files
2015-10-08 09:56:02 -05:00
V-38635.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38636.rst
V-3863{3,4,6}: Audit log files
2015-10-08 09:56:02 -05:00
V-38637.rst
V-38637, V-3866{3,4,5}: Verify auditd pkg contents
2015-10-15 08:07:57 -05:00
V-38638.rst
Graphical login exceptions
2015-10-08 10:16:21 -05:00
V-38639.rst
Graphical login exceptions
2015-10-08 10:16:21 -05:00
V-38640.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38641.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38642.rst
V-3864{2,5,7,9}, V-38651: Umask adjustments
2015-10-27 09:09:23 -05:00
V-38643.rst
V-38643: World writable files
2015-10-19 11:54:38 -05:00
V-38644.rst
V-386**: Disabling various unneeded services
2015-10-14 12:42:56 -05:00
V-38645.rst
V-3864{2,5,7,9}, V-38651: Umask adjustments
2015-10-27 09:09:23 -05:00
V-38646.rst
V-386**: Disabling various unneeded services
2015-10-14 12:42:56 -05:00
V-38647.rst
V-3864{2,5,7,9}, V-38651: Umask adjustments
2015-10-27 09:09:23 -05:00
V-38648.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38649.rst
V-3864{2,5,7,9}, V-38651: Umask adjustments
2015-10-27 09:09:23 -05:00
V-38650.rst
V-386**: Disabling various unneeded services
2015-10-14 12:42:56 -05:00
V-38651.rst
V-3864{2,5,7,9}, V-38651: Umask adjustments
2015-10-27 09:09:23 -05:00
V-38652.rst
V-3865{2,4}, V-57569: Mounting filesystems
2015-10-07 17:30:08 -05:00
V-38653.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38654.rst
V-3865{2,4}, V-57569: Mounting filesystems
2015-10-07 17:30:08 -05:00
V-38655.rst
V-38655: Mount w/noexec exception [docs only]
2015-10-14 16:12:59 +00:00
V-38656.rst
V-3865{6,7}: Samba
2015-10-15 16:27:13 -05:00
V-38657.rst
V-3865{6,7}: Samba
2015-10-15 16:27:13 -05:00
V-38658.rst
V-38658: Password reuse restrictions
2015-10-14 13:39:43 +00:00
V-38659.rst
V-38659, V-38662, V-38693: Encrypted storage exception docs
2015-10-14 13:40:10 +00:00
V-38660.rst
V-38660: SNMPv3
2015-10-27 11:04:32 -05:00
V-38661.rst
V-38659, V-38662, V-38693: Encrypted storage exception docs
2015-10-14 13:40:10 +00:00
V-38662.rst
V-38659, V-38662, V-38693: Encrypted storage exception docs
2015-10-14 13:40:10 +00:00
V-38663.rst
V-38637, V-3866{3,4,5}: Verify auditd pkg contents
2015-10-15 08:07:57 -05:00
V-38664.rst
V-38637, V-3866{3,4,5}: Verify auditd pkg contents
2015-10-15 08:07:57 -05:00
V-38665.rst
V-38637, V-3866{3,4,5}: Verify auditd pkg contents
2015-10-15 08:07:57 -05:00
V-38666.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38667.rst
V-386{67,70,95,96,98}, V-38700: Run AIDE via cron
2015-10-14 14:23:07 -05:00
V-38668.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38669.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38670.rst
V-386{67,70,95,96,98}, V-38700: Run AIDE via cron
2015-10-14 14:23:07 -05:00
V-38671.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38672.rst
V-38672: Remove netconsole service
2015-10-14 13:40:50 +00:00
V-38673.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38674.rst
V-3867{4,6}: X windows
2015-10-15 12:54:38 +00:00
V-38675.rst
V-38675: Restrict core dumps
2015-10-15 09:39:54 -05:00
V-38676.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38677.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38678.rst
V-38678: Auditd space_left size
2015-10-14 13:40:18 +00:00
V-38679.rst
V-38679: Disable DHCP client docs
2015-10-14 13:41:16 +00:00
V-38680.rst
V-38680: Audit log capacity notifications
2015-10-15 16:22:33 -05:00
V-38681.rst
V-38681: GID's in /etc/passwd & /etc/group
2015-10-15 16:18:47 -05:00
V-38682.rst
V-38682: Disable bluetooth modules
2015-10-14 21:23:11 -05:00
V-38683.rst
V-38683: Check for non-unique usernames
2015-10-22 08:12:33 -05:00
V-38684.rst
V-38684: Max concurrent sessions
2015-10-15 07:51:45 -05:00
V-38685.rst
V-386{85,90}: Temporary/emergency accounts (exception)
2015-10-14 13:42:28 +00:00
V-38686.rst
V-3851{1,2,3}, V-38686: IPv4 security controls
2015-10-14 13:43:37 +00:00
V-38687.rst
V-38687: VPN connectivity (exception docs)
2015-10-14 13:41:28 +00:00
V-38688.rst
Graphical login exceptions
2015-10-08 10:16:21 -05:00
V-38689.rst
Graphical login exceptions
2015-10-08 10:16:21 -05:00
V-38690.rst
V-386{85,90}: Temporary/emergency accounts (exception)
2015-10-14 13:42:28 +00:00
V-38691.rst
Switch from dict to individual variables
2016-05-06 17:42:56 +00:00
V-38692.rst
V-3869{2,4}: Lock inactive accounts
2015-10-22 07:57:31 -05:00
V-38693.rst
V-38659, V-38662, V-38693: Encrypted storage exception docs
2015-10-14 13:40:10 +00:00
V-38694.rst
V-3869{2,4}: Lock inactive accounts
2015-10-22 07:57:31 -05:00
V-38695.rst
V-386{67,70,95,96,98}, V-38700: Run AIDE via cron
2015-10-14 14:23:07 -05:00
V-38696.rst
V-386{67,70,95,96,98}, V-38700: Run AIDE via cron
2015-10-14 14:23:07 -05:00
V-38697.rst
V-38697: Sticky bit (exception)
2015-10-14 13:42:32 +00:00
V-38698.rst
V-386{67,70,95,96,98}, V-38700: Run AIDE via cron
2015-10-14 14:23:07 -05:00
V-38699.rst
V-38699: Public directories exception
2015-10-14 13:42:25 +00:00
V-38700.rst
V-386{67,70,95,96,98}, V-38700: Run AIDE via cron
2015-10-14 14:23:07 -05:00
V-38701.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38702.rst
V-38702: FTP daemon logging
2015-10-14 13:41:45 +00:00
V-43150.rst
Graphical login exceptions
2015-10-08 10:16:21 -05:00
V-51337.rst
Allow AppArmor to be enabled
2016-06-14 12:12:38 +00:00
V-51363.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-51369.rst
Doc updates
2016-05-06 13:41:03 +00:00
V-51379.rst
V-51739: LSM device labeling exception
2015-10-14 13:42:23 +00:00
V-51391.rst
V-51391: Initialize AIDE
2015-10-19 07:32:22 -05:00
V-51875.rst
V-51875: Symlink for docs
2015-10-14 13:41:48 +00:00
V-54381.rst
V-53481: Auditd disk space + single-user mode
2015-10-14 13:41:30 +00:00
V-57569.rst
V-3865{2,4}, V-57569: Mounting filesystems
2015-10-07 17:30:08 -05:00
V-58901.rst
Adjusting commonly failing tasks
2015-12-02 20:51:03 +00:00