openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/source/developer-notes
History
Major Hayden c59daafac7 V-38684: Max concurrent sessions 
Implements: blueprint security-hardening

Change-Id: I0fe3d2cbfdbb9063595f5041f0c5f2729180e65f
2015-10-15 07:51:45 -05:00
..
V-38437.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38438.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38439.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38443.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38444.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38445.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38446.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38447.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38448.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38449.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38450.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38451.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38452.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38453.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38454.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38455.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38456.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38457.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38458.rst
V-38458: /etc/group user ownership
2015-10-09 16:15:57 -05:00
V-38459.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38460.rst
Fix typo in documentation for V-38460
2015-10-07 15:35:54 -07:00
V-38461.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38462.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38463.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38464.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38465.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38466.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38467.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38468.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38469.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38470.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38471.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38472.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38473.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38474.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38475.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38476.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38477.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38478.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38479.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38480.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38481.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38482.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38483.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38484.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38486.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38487.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38488.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38489.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38490.rst
V-3851{4,5,6,7}: Disabling certain network protocols
2015-10-14 13:43:39 +00:00
V-38491.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38492.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38493.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38494.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38495.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38496.rst
V-38496: Lock system accounts other than root
2015-10-14 13:43:24 +00:00
V-38497.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38498.rst
V-38498: Audit log file permissions
2015-10-14 13:43:26 +00:00
V-38499.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38500.rst
V-38500: No UID 0 accounts except root
2015-10-14 13:43:28 +00:00
V-38502.rst
V-3850{2,3,4}: Ownership/mode of /etc/shadow
2015-10-09 10:31:01 -05:00
V-38503.rst
V-3850{2,3,4}: Ownership/mode of /etc/shadow
2015-10-09 10:31:01 -05:00
V-38504.rst
V-3850{2,3,4}: Ownership/mode of /etc/shadow
2015-10-09 10:31:01 -05:00
V-38511.rst
V-3851{1,2,3}, V-38686: IPv4 security controls
2015-10-14 13:43:37 +00:00
V-38512.rst
V-3851{1,2,3}, V-38686: IPv4 security controls
2015-10-14 13:43:37 +00:00
V-38513.rst
V-3851{1,2,3}, V-38686: IPv4 security controls
2015-10-14 13:43:37 +00:00
V-38514.rst
V-3851{4,5,6,7}: Disabling certain network protocols
2015-10-14 13:43:39 +00:00
V-38515.rst
V-3851{4,5,6,7}: Disabling certain network protocols
2015-10-14 13:43:39 +00:00
V-38516.rst
V-3851{4,5,6,7}: Disabling certain network protocols
2015-10-14 13:43:39 +00:00
V-38517.rst
V-3851{4,5,6,7}: Disabling certain network protocols
2015-10-14 13:43:39 +00:00
V-38518.rst
V-3851{8,9}: Log file ownership
2015-10-08 10:42:01 -05:00
V-38519.rst
V-3851{8,9}: Log file ownership
2015-10-08 10:42:01 -05:00
V-38520.rst
V-3852{0,1}: Back up log/audit records
2015-10-07 14:53:54 -05:00
V-38521.rst
V-3852{0,1}: Back up log/audit records
2015-10-07 14:53:54 -05:00
V-38522.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38523.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38524.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38525.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38526.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38527.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38528.rst
V-38528: Log martian packets
2015-10-07 15:48:42 -05:00
V-38529.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38530.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38531.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38532.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38533.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38534.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38535.rst
V-38535: Don't respond to ICMPv4 broadcast
2015-10-08 15:48:03 -05:00
V-38536.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38537.rst
V-38537: Ignore ICMPv4 bogus error messages
2015-10-07 15:52:12 -05:00
V-38538.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38539.rst
V-38539: Enable TCP SYN cookies
2015-10-09 10:30:12 -05:00
V-38540.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38541.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38542.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38544.rst
V-3852*, V-3853*, V-3854*: IPv4 restrictions
2015-10-07 15:35:39 -05:00
V-38547.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38548.rst
V-3854{8,9}, V-38553: IPv6 filtering/security
2015-10-07 16:24:10 -05:00
V-38549.rst
V-3854{8,9}, V-38553: IPv6 filtering/security
2015-10-07 16:24:10 -05:00
V-38550.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38551.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38552.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38553.rst
V-3854{8,9}, V-38553: IPv6 filtering/security
2015-10-07 16:24:10 -05:00
V-38555.rst
V-38555, V-38560: IPv4 firewalling
2015-10-07 16:28:50 -05:00
V-38556.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38557.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38558.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38559.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38560.rst
V-38555, V-38560: IPv4 firewalling
2015-10-07 16:28:50 -05:00
V-38561.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38563.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38565.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38566.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38567.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38568.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38569.rst
V-385{69,70,71,72}: Password requirements
2015-10-07 16:32:43 -05:00
V-38570.rst
V-385{69,70,71,72}: Password requirements
2015-10-07 16:32:43 -05:00
V-38571.rst
V-385{69,70,71,72}: Password requirements
2015-10-07 16:32:43 -05:00
V-38572.rst
V-385{69,70,71,72}: Password requirements
2015-10-07 16:32:43 -05:00
V-38575.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38578.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38579.rst
V-38579: grub.conf owned by root
2015-10-07 16:39:57 -05:00
V-38581.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38582.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38583.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38584.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38585.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38586.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38587.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38588.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38590.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38591.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38592.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38593.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38595.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38596.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38597.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38599.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38600.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38601.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38603.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38604.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38605.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38606.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38607.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38608.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38609.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38610.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38611.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38612.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38613.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38614.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38615.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38616.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38617.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38618.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38619.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38620.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38621.rst
V-38621: System clock sync
2015-10-09 13:24:52 -05:00
V-38622.rst
V-38622: Restricted mail relaying
2015-10-14 12:54:39 -05:00
V-38624.rst
V-38624: Rotate logs
2015-10-08 09:19:41 -05:00
V-38625.rst
V-3862{5,6,7}: LDAP server security
2015-10-07 17:08:23 -05:00
V-38626.rst
V-3862{5,6,7}: LDAP server security
2015-10-07 17:08:23 -05:00
V-38627.rst
V-3862{5,6,7}: LDAP server security
2015-10-07 17:08:23 -05:00
V-38628.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38629.rst
Graphical login exceptions
2015-10-08 10:16:21 -05:00
V-38630.rst
Graphical login exceptions
2015-10-08 10:16:21 -05:00
V-38631.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38632.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38633.rst
V-3863{3,4,6}: Audit log files
2015-10-08 09:56:02 -05:00
V-38634.rst
V-3863{3,4,6}: Audit log files
2015-10-08 09:56:02 -05:00
V-38635.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38636.rst
V-3863{3,4,6}: Audit log files
2015-10-08 09:56:02 -05:00
V-38638.rst
Graphical login exceptions
2015-10-08 10:16:21 -05:00
V-38639.rst
Graphical login exceptions
2015-10-08 10:16:21 -05:00
V-38640.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38641.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38645.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38650.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38652.rst
V-3865{2,4}, V-57569: Mounting filesystems
2015-10-07 17:30:08 -05:00
V-38653.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38654.rst
V-3865{2,4}, V-57569: Mounting filesystems
2015-10-07 17:30:08 -05:00
V-38655.rst
V-38655: Mount w/noexec exception [docs only]
2015-10-14 16:12:59 +00:00
V-38666.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38667.rst
V-386{67,70,95,96,98}, V-38700: Run AIDE via cron
2015-10-14 14:23:07 -05:00
V-38668.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38669.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38670.rst
V-386{67,70,95,96,98}, V-38700: Run AIDE via cron
2015-10-14 14:23:07 -05:00
V-38671.rst
V-38671: Remove sendmail
2015-10-14 13:40:20 +00:00
V-38673.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38677.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38679.rst
V-38679: Disable DHCP client docs
2015-10-14 13:41:16 +00:00
V-38682.rst
V-38682: Disable bluetooth modules
2015-10-14 21:23:11 -05:00
V-38684.rst
V-38684: Max concurrent sessions
2015-10-15 07:51:45 -05:00
V-38686.rst
V-3851{1,2,3}, V-38686: IPv4 security controls
2015-10-14 13:43:37 +00:00
V-38687.rst
V-38687: VPN connectivity (exception docs)
2015-10-14 13:41:28 +00:00
V-38688.rst
Graphical login exceptions
2015-10-08 10:16:21 -05:00
V-38689.rst
Graphical login exceptions
2015-10-08 10:16:21 -05:00
V-38695.rst
V-386{67,70,95,96,98}, V-38700: Run AIDE via cron
2015-10-14 14:23:07 -05:00
V-38696.rst
V-386{67,70,95,96,98}, V-38700: Run AIDE via cron
2015-10-14 14:23:07 -05:00
V-38697.rst
V-38697: Sticky bit (exception)
2015-10-14 13:42:32 +00:00
V-38698.rst
V-386{67,70,95,96,98}, V-38700: Run AIDE via cron
2015-10-14 14:23:07 -05:00
V-38700.rst
V-386{67,70,95,96,98}, V-38700: Run AIDE via cron
2015-10-14 14:23:07 -05:00
V-38701.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-38702.rst
V-38702: FTP daemon logging
2015-10-14 13:41:45 +00:00
V-43150.rst
Graphical login exceptions
2015-10-08 10:16:21 -05:00
V-51363.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-51369.rst
Initial import of openstack-ansible-security role
2015-10-07 07:27:39 -05:00
V-57569.rst
V-3865{2,4}, V-57569: Mounting filesystems
2015-10-07 17:30:08 -05:00