Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Introduce support for the distributed SSHd configuration #6926

Merged
merged 6 commits into from
Aug 3, 2021

Commits on Jul 30, 2021

  1. Updated checks and remediations of the sshd template.

    Configuration of sshd moves from one config file to a config directory.
    Therefore, checks should consider all those files, and the remediation should aim
    to deliver fixes to one of those files in the config directory.
    
    Tests that interact with this behavior have been added and are applicable for Fedora and RHEL9 products.
    matejak committed Jul 30, 2021
    Configuration menu
    Copy the full SHA
    b951a89 View commit details
    Browse the repository at this point in the history
  2. Improved the lineinfile template.

    It now escapes the text contents if parts of them could be incorrectly interpreted as regexes.
    matejak committed Jul 30, 2021
    Configuration menu
    Copy the full SHA
    b0f86c1 View commit details
    Browse the repository at this point in the history
  3. Introduced the sshd_use_directory_configuration rule.

    The rule makes sure that the sshd configuration is distributed in the
    /etc/ssh/sshd_config.d/ directory, and therefore it makes sense to scan that directory
    in another rules.
    matejak committed Jul 30, 2021
    Configuration menu
    Copy the full SHA
    6953f74 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    d7fcab7 View commit details
    Browse the repository at this point in the history
  5. Removed devault values that are variables from Jinja

    Support in older jinja2 packages is not in a good shape.
    matejak committed Jul 30, 2021
    Configuration menu
    Copy the full SHA
    df45c3f View commit details
    Browse the repository at this point in the history

Commits on Aug 3, 2021

  1. Don't remediate when it is inappropriate

    Don't remediate when the config file already contains the include
    directive.
    matejak committed Aug 3, 2021
    Configuration menu
    Copy the full SHA
    a3ec49f View commit details
    Browse the repository at this point in the history