-
Notifications
You must be signed in to change notification settings - Fork 144
Lockdown
THIS PAGE IS OLD and no longer maintained. For questions, please use the Ansible forum.
INACTIVE, THE INFO BELOW IS IRRELEVANT
The Lockdown Working group focuses on developing out roles that automate well known security standards. At the moment the principal focus is around hardening via STIG and CIS guidance.
Project | Status |
---|---|
RHEL7 STIG | |
RHEL7 CIS | |
RHEL6 STIG | |
Windows 2008R2 MS STIG | |
Windows 2012 MS STIG |
Every other Thursday at 4PM UTC on #ansible-lockdown
Calendar iCal Link (REMOVED)
- Auto-gen documentation per role and aggregate them in a single portal
- Migrate all testing to Molecule
- Support applying roles against containers
- Combine efforts as much as possible with the Ansible Hardening and Compliance as Code projects
- Collect new ideas (including feature reqeust, issue, scenario, documentation feedback)
- Work together and have fun
- Define action plan and track progress
- Update focus as necessary
Project status is tracked and monitored via Lockdown GitHub Project
- David Federlein, dfederlein
- George Nalen, georgenalen
- James Cassell, jamescassell
TBD
-
#ansible-lockdown
IRC channel (refer to the Communication guide for details). - ansible-lockdown mailing list on Google Groups.
- For security-related concerns email ansible@mindpointgroup.com. A security concern would be something where the content of a role leads to a vulnerability in the targeted system.
This Wiki is used for quick notes, not for support or documentation.
Working groups are now in the Ansible forum
Ansible project:
Community,
Contributor Experience,
Docs,
News,
Outreach,
RelEng,
Testing
Cloud:
AWS,
Azure,
CloudStack,
Container,
DigitalOcean,
Docker,
hcloud,
Kubernetes,
Linode,
OpenStack,
oVirt,
Virt,
VMware
Networking:
ACI,
AVI,
F5,
Meraki,
Network,
NXOS
Ansible Developer Tools:
Ansible-developer-tools
Software:
Crypto,
Foreman,
GDrive,
GitLab,
Grafana,
IPA,
JBoss,
MongoDB,
MySQL,
PostgreSQL,
RabbitMQ,
Zabbix
System:
AIX,
BSD,
HP-UX,
macOS,
Remote Management,
Solaris,
Windows
Security:
Security-Automation,
Lockdown
Tooling:
AWX,
Galaxy,
Molecule
Plugins:
httpapi