Sandwich fbd57e0603 fix(cis): skip squashfs blacklist on Ubuntu to preserve snap functionality

2026-02-21 00:38:47 +01:00

..

auth.yml

fix(cis): remove deprecated sshd options and update hardening values

2026-02-20 20:17:52 +01:00

crypto.yml

refactor(global_defaults): extract OS family lists to single source of truth

2026-02-20 22:52:55 +01:00

files.yml

CIS role split and permission safety

2025-12-27 22:27:26 +01:00

main.yml

CIS role split and permission safety

2025-12-27 22:27:26 +01:00

modules.yml

fix(cis): skip squashfs blacklist on Ubuntu to preserve snap functionality

2026-02-21 00:38:47 +01:00

permissions.yml

refactor: add loop_control labels to dict-based loops across all roles

2026-02-20 23:00:53 +01:00

security_lines.yml

fix(cis): add regexp to all lineinfile entries in security_lines.yml for idempotency

2026-02-21 00:38:36 +01:00

sshd.yml

refactor: add loop_control labels to dict-based loops across all roles

2026-02-20 23:00:53 +01:00

sysctl.yml

fix(cis): remove deprecated sshd options and update hardening values

2026-02-20 20:17:52 +01:00