DT Pan-Net, s.r.o - Security Compliance

---

Description

This is a fork from the original work started at Telekom Security.

The goal of the project is to provide a quick and reliable way to reach compliance against Deutsche Telekom group-wide security Requirements.

NOTE: changing default values is HIGHLY not recommended.

Features

• Can be run in live systems
• Can be run at image-creation time

Available Scripts

Ansible:

1. SSH
2. Linux OS for Servers

Usage

You can't use ansible-galaxy since the roles are packed in one repository, but here is a way to deal with that:

TEMP_DIR=$(mktemp -d)
git clone --depth 1 -b v0.1 https://github.com/pan-net-security/compliance-automation.git $TEMP_DIR
mv $TEMP_DIR/T-Sec.* /etc/ansible/roles
rm -fr $TEMP_DIR

Development

Refer to each role's README inside their directory.

References

Telekom Security - Security Requirements:

1. SecReq 3.04: Secure Shell
2. SecReq 3.65: Linux OS for Servers

---

Authors:

• Telekom Security (original work)
• Deutsche Telekom Pan-Net