Sandwich 21bf8f79e2 fix(cis): make mlkem768x25519-sha256 KexAlgorithm conditional on OpenSSH 9.9+

2026-02-20 21:50:58 +01:00

..

auth.yml

fix(cis): remove deprecated sshd options and update hardening values

2026-02-20 20:17:52 +01:00

crypto.yml

fix(cis): remove deprecated sshd options and update hardening values

2026-02-20 20:17:52 +01:00

files.yml

CIS role split and permission safety

2025-12-27 22:27:26 +01:00

main.yml

CIS role split and permission safety

2025-12-27 22:27:26 +01:00

modules.yml

fix(cis): remove deprecated sshd options and update hardening values

2026-02-20 20:17:52 +01:00

permissions.yml

Move derived vars into role defaults

2026-01-02 11:25:51 +01:00

security_lines.yml

fix(cis): use is_rhel for journald config path instead of fedora-only check

2026-02-20 21:50:55 +01:00

sshd.yml

fix(cis): make mlkem768x25519-sha256 KexAlgorithm conditional on OpenSSH 9.9+

2026-02-20 21:50:58 +01:00

sysctl.yml

fix(cis): remove deprecated sshd options and update hardening values

2026-02-20 20:17:52 +01:00