Sandwich 9e3688ae2b fix(cis): strengthen kernel module blacklist and sysctl hardening

2026-02-21 01:18:52 +01:00

..

auth.yml

fix(cis): remove deprecated sshd options and update hardening values

2026-02-20 20:17:52 +01:00

crypto.yml

refactor(global_defaults): extract OS family lists to single source of truth

2026-02-20 22:52:55 +01:00

files.yml

CIS role split and permission safety

2025-12-27 22:27:26 +01:00

main.yml

CIS role split and permission safety

2025-12-27 22:27:26 +01:00

modules.yml

fix(cis): strengthen kernel module blacklist and sysctl hardening

2026-02-21 01:18:52 +01:00

permissions.yml

refactor: add loop_control labels to dict-based loops across all roles

2026-02-20 23:00:53 +01:00

security_lines.yml

fix(cis): add regexp to all lineinfile entries in security_lines.yml for idempotency

2026-02-21 00:38:36 +01:00

sshd.yml

refactor(cis): remove redundant AllowUsers/AllowGroups/DenyUsers/DenyGroups from sshd

2026-02-21 00:38:52 +01:00

sysctl.yml

fix(cis): strengthen kernel module blacklist and sysctl hardening

2026-02-21 01:18:52 +01:00