Ansible/ssh-hardening
1
0
Fork 0
Code Issues 9 Pull requests 1 Projects Releases Wiki Activity

Remove debug code, reformat

Browse source
This commit is contained in:
Sven Velt 2021-10-12 09:40:00 +02:00
parent 7de7dfb31f
commit b75fe6283c
3 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
tasks/main.yml
View file

@ -67,9 +67,6 @@
register: ssh_hardening_use_policies register: ssh_hardening_use_policies
- debug: var=ssh_hardening_use_policies.stat.exists
- name: "The (RedHat) crypto policy way..." - name: "The (RedHat) crypto policy way..."
include_tasks: restrictions_crypto_policy.yml include_tasks: restrictions_crypto_policy.yml
when: ssh_hardening_use_policies.stat.exists when: ssh_hardening_use_policies.stat.exists

4
tasks/moduli.yml
View file

@ -4,16 +4,20 @@
path: "{{ ssh_hardening_moduli_backup }}" path: "{{ ssh_hardening_moduli_backup }}"
register: ssh_hardening_moduli_backup_file register: ssh_hardening_moduli_backup_file
- name: 'Moduli: Backup "moduli.not-hardened"' - name: 'Moduli: Backup "moduli.not-hardened"'
shell: 'cp -a {{ ssh_hardening_moduli }} {{ ssh_hardening_moduli_backup }}' shell: 'cp -a {{ ssh_hardening_moduli }} {{ ssh_hardening_moduli_backup }}'
when: not ssh_hardening_moduli_backup_file.stat.exists when: not ssh_hardening_moduli_backup_file.stat.exists
- name: 'Moduli: Check for small Diffie-Hellman moduli' - name: 'Moduli: Check for small Diffie-Hellman moduli'
shell: "grep -c ' 1535 \\| 2047 ' /etc/ssh/moduli || true" shell: "grep -c ' 1535 \\| 2047 ' /etc/ssh/moduli || true"
changed_when: False changed_when: False
register: ssh_hardening_moduli_small register: ssh_hardening_moduli_small
- name: 'Moduli: Remove small Diffie-Hellman moduli' - name: 'Moduli: Remove small Diffie-Hellman moduli'
shell: "TMPF=$(mktemp) && awk '$5 >= 3071' /etc/ssh/moduli >${TMPF} && mv ${TMPF} /etc/ssh/moduli" shell: "TMPF=$(mktemp) && awk '$5 >= 3071' /etc/ssh/moduli >${TMPF} && mv ${TMPF} /etc/ssh/moduli"
when: ssh_hardening_moduli_small.stdout|int > 0 when: ssh_hardening_moduli_small.stdout|int > 0

1
tasks/restrictions_configfile.yml
View file

@ -4,7 +4,6 @@
changed_when: False changed_when: False
register: ssh_hardening_includedir register: ssh_hardening_includedir
- debug: var=ssh_hardening_includedir
- name: Write restrictions to include file - name: Write restrictions to include file
template: template: