Sandwich 417737f904 refactor(global_defaults): extract OS family lists to single source of truth

2026-02-20 22:52:55 +01:00

..

auth.yml

fix(cis): remove deprecated sshd options and update hardening values

2026-02-20 20:17:52 +01:00

crypto.yml

refactor(global_defaults): extract OS family lists to single source of truth

2026-02-20 22:52:55 +01:00

files.yml

CIS role split and permission safety

2025-12-27 22:27:26 +01:00

main.yml

CIS role split and permission safety

2025-12-27 22:27:26 +01:00

modules.yml

fix(cis): remove deprecated sshd options and update hardening values

2026-02-20 20:17:52 +01:00

permissions.yml

Move derived vars into role defaults

2026-01-02 11:25:51 +01:00

security_lines.yml

fix(cis): use is_rhel for journald config path instead of fedora-only check

2026-02-20 21:50:55 +01:00

sshd.yml

fix(cis): add pipefail to sshd version detection and define binary defaults

2026-02-20 22:24:14 +01:00

sysctl.yml

fix(cis): remove deprecated sshd options and update hardening values

2026-02-20 20:17:52 +01:00