|
1 | 1 | # Changelog
|
2 | 2 |
|
| 3 | +## [Unreleased](https://github.com/dev-sec/ansible-ssh-hardening/tree/HEAD) |
| 4 | + |
| 5 | +[Full Changelog](https://github.com/dev-sec/ansible-ssh-hardening/compare/8.0.0...HEAD) |
| 6 | + |
| 7 | +**Implemented enhancements:** |
| 8 | + |
| 9 | +- add changelog and release workflow [\#282](https://github.com/dev-sec/ansible-ssh-hardening/pull/282) ([rndmh3ro](https://github.com/rndmh3ro)) |
| 10 | +- fix: Ansible part of Fedora build [\#281](https://github.com/dev-sec/ansible-ssh-hardening/pull/281) ([kostasns](https://github.com/kostasns)) |
| 11 | +- Add changelog action [\#280](https://github.com/dev-sec/ansible-ssh-hardening/pull/280) ([rndmh3ro](https://github.com/rndmh3ro)) |
| 12 | +- fix: Amazon linux build [\#279](https://github.com/dev-sec/ansible-ssh-hardening/pull/279) ([kostasns](https://github.com/kostasns)) |
| 13 | +- feat: Allow to set custom list of HostKeyAlgorithms [\#278](https://github.com/dev-sec/ansible-ssh-hardening/pull/278) ([kostasns](https://github.com/kostasns)) |
| 14 | +- fix\(ansible\_facts\): replace few remaining facts from 'ansible\_' to using 'ansible\_facts' dictionary [\#277](https://github.com/dev-sec/ansible-ssh-hardening/pull/277) ([kostasns](https://github.com/kostasns)) |
| 15 | + |
3 | 16 | ## [8.0.0](https://github.com/dev-sec/ansible-ssh-hardening/tree/8.0.0) (2020-04-21)
|
4 | 17 |
|
5 | 18 | [Full Changelog](https://github.com/dev-sec/ansible-ssh-hardening/compare/7.0.0...8.0.0)
|
|
25 | 38 | - refactor authenticationmethod settings, allow user to set authenticat… [\#245](https://github.com/dev-sec/ansible-ssh-hardening/pull/245) ([szEvEz](https://github.com/szEvEz))
|
26 | 39 | - RHEL/OL/CentOS 8 support [\#242](https://github.com/dev-sec/ansible-ssh-hardening/pull/242) ([Furragen](https://github.com/Furragen))
|
27 | 40 | - Added ssh\_syslog\_facility, ssh\_log\_level and ssh\_strict\_modes parameters [\#240](https://github.com/dev-sec/ansible-ssh-hardening/pull/240) ([bschonec](https://github.com/bschonec))
|
28 |
| -- set UsePAM to yes by default [\#233](https://github.com/dev-sec/ansible-ssh-hardening/pull/233) ([rndmh3ro](https://github.com/rndmh3ro)) |
29 | 41 |
|
30 | 42 | **Fixed bugs:**
|
31 | 43 |
|
|
43 | 55 | **Implemented enhancements:**
|
44 | 56 |
|
45 | 57 | - Add new option ssh\_server\_match\_address [\#230](https://github.com/dev-sec/ansible-ssh-hardening/issues/230)
|
| 58 | +- set UsePAM to yes by default [\#233](https://github.com/dev-sec/ansible-ssh-hardening/pull/233) ([rndmh3ro](https://github.com/rndmh3ro)) |
46 | 59 |
|
47 | 60 | **Fixed bugs:**
|
48 | 61 |
|
|
176 | 189 | - Added support for TrustedUserCAKeys and AuthorizedPrincipalsFile. [\#157](https://github.com/dev-sec/ansible-ssh-hardening/pull/157) ([gdelafond](https://github.com/gdelafond))
|
177 | 190 | - Adds sshd config for keyboard-interactive pam device [\#156](https://github.com/dev-sec/ansible-ssh-hardening/pull/156) ([rcII](https://github.com/rcII))
|
178 | 191 | - Use package state 'present' since 'installed' is deprecated [\#154](https://github.com/dev-sec/ansible-ssh-hardening/pull/154) ([Normo](https://github.com/Normo))
|
| 192 | +- conform to current dev-sec/ssh-baseline [\#150](https://github.com/dev-sec/ansible-ssh-hardening/pull/150) ([alval5280](https://github.com/alval5280)) |
179 | 193 | - new parameter: ssh\_max\_startups [\#149](https://github.com/dev-sec/ansible-ssh-hardening/pull/149) ([aeschbacher](https://github.com/aeschbacher))
|
180 | 194 | - Update syntax to 2.4 [\#148](https://github.com/dev-sec/ansible-ssh-hardening/pull/148) ([thomasjpfan](https://github.com/thomasjpfan))
|
181 | 195 | - Amazonlinux-Testing [\#147](https://github.com/dev-sec/ansible-ssh-hardening/pull/147) ([rndmh3ro](https://github.com/rndmh3ro))
|
|
195 | 209 | **Merged pull requests:**
|
196 | 210 |
|
197 | 211 | - remove oracle7 from travis tests for the time being [\#181](https://github.com/dev-sec/ansible-ssh-hardening/pull/181) ([rndmh3ro](https://github.com/rndmh3ro))
|
198 |
| -- Remove deprecated UseLogin option [\#141](https://github.com/dev-sec/ansible-ssh-hardening/pull/141) ([syhe](https://github.com/syhe)) |
199 | 212 |
|
200 | 213 | ## [4.4.0](https://github.com/dev-sec/ansible-ssh-hardening/tree/4.4.0) (2017-12-29)
|
201 | 214 |
|
|
204 | 217 | **Implemented enhancements:**
|
205 | 218 |
|
206 | 219 | - Changes in selinux section to avoid confusion and some inconsistencies [\#127](https://github.com/dev-sec/ansible-ssh-hardening/issues/127)
|
207 |
| -- conform to current dev-sec/ssh-baseline [\#150](https://github.com/dev-sec/ansible-ssh-hardening/pull/150) ([alval5280](https://github.com/alval5280)) |
208 | 220 | - Issue \#137: Fix sshd\_config's "Match Group sftponly" [\#138](https://github.com/dev-sec/ansible-ssh-hardening/pull/138) ([kekumu](https://github.com/kekumu))
|
209 | 221 | - allow configuration of GatewayPorts [\#136](https://github.com/dev-sec/ansible-ssh-hardening/pull/136) ([pwyliu](https://github.com/pwyliu))
|
210 | 222 | - Added support for AuthorizedKeysFile config setting [\#132](https://github.com/dev-sec/ansible-ssh-hardening/pull/132) ([hyrsky](https://github.com/hyrsky))
|
|
224 | 236 |
|
225 | 237 | **Merged pull requests:**
|
226 | 238 |
|
| 239 | +- Remove deprecated UseLogin option [\#141](https://github.com/dev-sec/ansible-ssh-hardening/pull/141) ([syhe](https://github.com/syhe)) |
227 | 240 | - Macs kex ciphers [\#139](https://github.com/dev-sec/ansible-ssh-hardening/pull/139) ([rndmh3ro](https://github.com/rndmh3ro))
|
228 | 241 | - force /bin/sh when getting openssh-version [\#134](https://github.com/dev-sec/ansible-ssh-hardening/pull/134) ([gtz42](https://github.com/gtz42))
|
229 | 242 |
|
|
245 | 258 |
|
246 | 259 | ## [4.3.0](https://github.com/dev-sec/ansible-ssh-hardening/tree/4.3.0) (2017-08-03)
|
247 | 260 |
|
248 |
| -[Full Changelog](https://github.com/dev-sec/ansible-ssh-hardening/compare/4.1.3...4.3.0) |
| 261 | +[Full Changelog](https://github.com/dev-sec/ansible-ssh-hardening/compare/4.2.0...4.3.0) |
249 | 262 |
|
250 | 263 | **Implemented enhancements:**
|
251 | 264 |
|
|
257 | 270 | - Don't overwrite ssh\_host\_key\_files if set manually [\#125](https://github.com/dev-sec/ansible-ssh-hardening/pull/125) ([oakey-b1](https://github.com/oakey-b1))
|
258 | 271 | - Add comment filter to {{ansible\_managed}} string [\#121](https://github.com/dev-sec/ansible-ssh-hardening/pull/121) ([fazlearefin](https://github.com/fazlearefin))
|
259 | 272 |
|
260 |
| -## [4.1.3](https://github.com/dev-sec/ansible-ssh-hardening/tree/4.1.3) (2017-06-30) |
| 273 | +## [4.2.0](https://github.com/dev-sec/ansible-ssh-hardening/tree/4.2.0) (2017-06-30) |
261 | 274 |
|
262 |
| -[Full Changelog](https://github.com/dev-sec/ansible-ssh-hardening/compare/4.2.0...4.1.3) |
| 275 | +[Full Changelog](https://github.com/dev-sec/ansible-ssh-hardening/compare/4.1.3...4.2.0) |
263 | 276 |
|
264 |
| -## [4.2.0](https://github.com/dev-sec/ansible-ssh-hardening/tree/4.2.0) (2017-06-30) |
| 277 | +## [4.1.3](https://github.com/dev-sec/ansible-ssh-hardening/tree/4.1.3) (2017-06-30) |
265 | 278 |
|
266 |
| -[Full Changelog](https://github.com/dev-sec/ansible-ssh-hardening/compare/4.1.2...4.2.0) |
| 279 | +[Full Changelog](https://github.com/dev-sec/ansible-ssh-hardening/compare/4.1.2...4.1.3) |
267 | 280 |
|
268 | 281 | **Implemented enhancements:**
|
269 | 282 |
|
|
373 | 386 | - Selinux issue [\#75](https://github.com/dev-sec/ansible-ssh-hardening/issues/75)
|
374 | 387 | - Running the tests locally [\#61](https://github.com/dev-sec/ansible-ssh-hardening/issues/61)
|
375 | 388 |
|
376 |
| -**Closed issues:** |
377 |
| - |
378 |
| -- Applied-Crypto-Hardening project and new cyphers. [\#28](https://github.com/dev-sec/ansible-ssh-hardening/issues/28) |
379 |
| - |
380 | 389 | ## [3.1.0](https://github.com/dev-sec/ansible-ssh-hardening/tree/3.1.0) (2016-08-03)
|
381 | 390 |
|
382 | 391 | [Full Changelog](https://github.com/dev-sec/ansible-ssh-hardening/compare/3.1...3.1.0)
|
|
436 | 445 | **Merged pull requests:**
|
437 | 446 |
|
438 | 447 | - New release 3.0.0 [\#59](https://github.com/dev-sec/ansible-ssh-hardening/pull/59) ([rndmh3ro](https://github.com/rndmh3ro))
|
439 |
| -- Add var to travis job [\#42](https://github.com/dev-sec/ansible-ssh-hardening/pull/42) ([rndmh3ro](https://github.com/rndmh3ro)) |
440 | 448 |
|
441 | 449 | ## [2.0.0](https://github.com/dev-sec/ansible-ssh-hardening/tree/2.0.0) (2015-11-28)
|
442 | 450 |
|
|
449 | 457 | **Merged pull requests:**
|
450 | 458 |
|
451 | 459 | - New dir layout. Fix \#43 [\#44](https://github.com/dev-sec/ansible-ssh-hardening/pull/44) ([rndmh3ro](https://github.com/rndmh3ro))
|
| 460 | +- Add var to travis job [\#42](https://github.com/dev-sec/ansible-ssh-hardening/pull/42) ([rndmh3ro](https://github.com/rndmh3ro)) |
452 | 461 | - sftp\_enable option [\#41](https://github.com/dev-sec/ansible-ssh-hardening/pull/41) ([fitz123](https://github.com/fitz123))
|
453 | 462 |
|
454 | 463 | ## [1.2.1](https://github.com/dev-sec/ansible-ssh-hardening/tree/1.2.1) (2015-10-16)
|
|
465 | 474 |
|
466 | 475 | ## [1.2.0](https://github.com/dev-sec/ansible-ssh-hardening/tree/1.2.0) (2015-09-28)
|
467 | 476 |
|
468 |
| -[Full Changelog](https://github.com/dev-sec/ansible-ssh-hardening/compare/1.1...1.2.0) |
| 477 | +[Full Changelog](https://github.com/dev-sec/ansible-ssh-hardening/compare/1.1.0...1.2.0) |
469 | 478 |
|
470 | 479 | **Merged pull requests:**
|
471 | 480 |
|
472 | 481 | - bugfix. Now option true for PrintLastLog is available again [\#39](https://github.com/dev-sec/ansible-ssh-hardening/pull/39) ([fitz123](https://github.com/fitz123))
|
473 | 482 | - Add more travis-tests [\#38](https://github.com/dev-sec/ansible-ssh-hardening/pull/38) ([rndmh3ro](https://github.com/rndmh3ro))
|
| 483 | +- Support for selinux and pam. fix \#23 [\#35](https://github.com/dev-sec/ansible-ssh-hardening/pull/35) ([rndmh3ro](https://github.com/rndmh3ro)) |
474 | 484 |
|
475 |
| -## [1.1](https://github.com/dev-sec/ansible-ssh-hardening/tree/1.1) (2015-09-01) |
| 485 | +## [1.1.0](https://github.com/dev-sec/ansible-ssh-hardening/tree/1.1.0) (2015-09-01) |
476 | 486 |
|
477 |
| -[Full Changelog](https://github.com/dev-sec/ansible-ssh-hardening/compare/1.1.0...1.1) |
| 487 | +[Full Changelog](https://github.com/dev-sec/ansible-ssh-hardening/compare/1.1...1.1.0) |
478 | 488 |
|
479 |
| -## [1.1.0](https://github.com/dev-sec/ansible-ssh-hardening/tree/1.1.0) (2015-09-01) |
| 489 | +## [1.1](https://github.com/dev-sec/ansible-ssh-hardening/tree/1.1) (2015-09-01) |
480 | 490 |
|
481 |
| -[Full Changelog](https://github.com/dev-sec/ansible-ssh-hardening/compare/1.0.0...1.1.0) |
| 491 | +[Full Changelog](https://github.com/dev-sec/ansible-ssh-hardening/compare/1.0.0...1.1) |
482 | 492 |
|
483 | 493 | **Closed issues:**
|
484 | 494 |
|
485 | 495 | - ssh\_ports - individual client/server config [\#33](https://github.com/dev-sec/ansible-ssh-hardening/issues/33)
|
| 496 | +- Applied-Crypto-Hardening project and new cyphers. [\#28](https://github.com/dev-sec/ansible-ssh-hardening/issues/28) |
486 | 497 | - UsePAM should probably default to yes on Red Hat Linux 7 [\#23](https://github.com/dev-sec/ansible-ssh-hardening/issues/23)
|
| 498 | +- Running test-kitchen fails [\#2](https://github.com/dev-sec/ansible-ssh-hardening/issues/2) |
487 | 499 |
|
488 | 500 | **Merged pull requests:**
|
489 | 501 |
|
490 | 502 | - Change variable for hmac from server to client [\#37](https://github.com/dev-sec/ansible-ssh-hardening/pull/37) ([rndmh3ro](https://github.com/rndmh3ro))
|
491 | 503 | - Update kitchen-ansible, remove separate debian install [\#36](https://github.com/dev-sec/ansible-ssh-hardening/pull/36) ([rndmh3ro](https://github.com/rndmh3ro))
|
492 |
| -- Support for selinux and pam. fix \#23 [\#35](https://github.com/dev-sec/ansible-ssh-hardening/pull/35) ([rndmh3ro](https://github.com/rndmh3ro)) |
493 | 504 | - Separate ssh client and server ports. Fix \#33 [\#34](https://github.com/dev-sec/ansible-ssh-hardening/pull/34) ([rndmh3ro](https://github.com/rndmh3ro))
|
494 | 505 | - update common kitchen.yml platforms \(ansible\), kitchen\_debian.yml platforms \(ansible\) [\#32](https://github.com/dev-sec/ansible-ssh-hardening/pull/32) ([chris-rock](https://github.com/chris-rock))
|
495 | 506 | - Make MaxAuthTries configurable [\#31](https://github.com/dev-sec/ansible-ssh-hardening/pull/31) ([rndmh3ro](https://github.com/rndmh3ro))
|
|
516 | 527 |
|
517 | 528 | - add travis test for ubuntu 12.04 [\#7](https://github.com/dev-sec/ansible-ssh-hardening/issues/7)
|
518 | 529 | - Use handler for sshd restart [\#6](https://github.com/dev-sec/ansible-ssh-hardening/issues/6)
|
519 |
| -- Running test-kitchen fails [\#2](https://github.com/dev-sec/ansible-ssh-hardening/issues/2) |
520 | 530 |
|
521 | 531 | **Merged pull requests:**
|
522 | 532 |
|
|
0 commit comments