Skip to content

2.2.0

Compare
Choose a tag to compare
@github-actions github-actions released this 13 Sep 17:31
· 84 commits to master since this release

Commits

  • e1cdcfa: Ensure secrets are hidden in Ansible logs. (jgoutin)
  • Ensure logs in syslog (jgoutin)
  • Fix certificate permission. (jgoutin)
  • Ensure Firewalld allows alternate ports. (jgoutin)
  • Ensure Nextcloud Talk use TLS for TURN server. (jgoutin)
  • Allow configuring cryptography policies to use FIPS (Can be useful for compliance). (jgoutin)
  • Configure DNF and DNF-automatic to pass openSCAP checks. (jgoutin)
  • Ensure Empty passwords are disabled with SSH. (jgoutin)
  • Ensure audit is enabled in kernel. (jgoutin)
  • Add more kernel use-after-free mitigation. (jgoutin)
  • Basic Auditd configuration. (jgoutin)
  • Fully disable systemd coredump service and socket. (jgoutin)
  • Ensure Chrony is in client mode only. (jgoutin)
  • Ensure interactive timeout is set. (jgoutin)
  • Ensure rngd is enabled (Hardware RNG Entropy Gatherer Service) (jgoutin)
  • Ensure SSH Kerberos authentication is disabled. (jgoutin)
  • Ensure SSH force frequent session key renegotiation. (jgoutin)
  • Ensure RPM operations are logged in auditd. (jgoutin)
  • Remove ambient capabilities when not required. (jgoutin)
  • c690bbe: php-fpm: Add Remi repository as source + add "php-snuffleupagus" security hardening module. (jgoutin)
  • Add audit rules to fix OpenSCAP reports. (jgoutin)
  • Fix SSHd configuration order + Add SSH banner. (jgoutin)
  • Add password complexity policy. (jgoutin)
  • Add a generic login banner. (jgoutin)
  • Use hardware accelerated drivers from RPMFusion. (jgoutin)
  • Add missing Kodi extra packages. (jgoutin)
  • Allow installing PVR plugins packages. (jgoutin)
  • Ensure common fonts are installed (To add non latin symbols support). (jgoutin)
  • Allow the use of Wayland instead of GBM (jgoutin)
  • Fix screen tearing with AMD hardware. (jgoutin)
  • Remove lirc if IR is disabled. (jgoutin)
  • Install "crypto-policies-scripts" if required (jgoutin)
  • Ignore error if "systemd-coredump" is missing (jgoutin)
  • Ensure "localpkg_gpgcheck" can be disabled (Required for "akmods"). (jgoutin)
  • Add option to install xpadneo (Bluetooth Xbox controllers driver) (jgoutin)
  • Update for Nextcloud 27 / Nextcloud Hub 5 (jgoutin)