Code

Enhanced file permission hardening#360

Code

Merged

FalcoSuessgott merged 4 commits intoansible-community:masteransible-community/ansible-vault:masterfrom lakrass:enhanced-production-hardeninglakrass/ansible-vault:enhanced-production-hardeningCopy head branch name to clipboardDec 13, 2024

+91-29

Commits

Commits on Dec 12, 2024

• feat(hardening): tightened file perm hardening according to HashiCorp best practice

  lakrass

  committed
  fe0876a

  Copy full SHA for fe0876a

• fix: split tls dir creation into two tasks to ensure idempotency

  lakrass

  committed
  02ea520

  Copy full SHA for 02ea520

• feat(hardening): delete defaultly unused files to reduce attack surface

  lakrass

  committed
  724c59d

  Copy full SHA for 724c59d

• feat(hardening): use private tls path, harden perms of generated cert/key

  lakrass

  committed
  eaa03db

  Copy full SHA for eaa03db