Securing Linux with Ansible
-
@tim_g said in Securing Linux with Ansible:
I made a really good SaltStack state for Linux hardening. Works great, and now pass OpenVAS with flying colours for example.
Did you post it here? If so, I missed it...
-
@tim_g said in Securing Linux with Ansible:
I made a really good SaltStack state for Linux hardening. Works great, and now pass OpenVAS with flying colours for example.
Where is the ML article about that?
-
@scottalanmiller said in Securing Linux with Ansible:
@tim_g said in Securing Linux with Ansible:
I made a really good SaltStack state for Linux hardening. Works great, and now pass OpenVAS with flying colours for example.
Where is the ML article about that?
I can paste it here for now if ya like... but I have a lot of stuff saved up to put in some blog post drafts I have going. I usually put stuff here afterwards.
-
@scottalanmiller said in Securing Linux with Ansible:
@tim_g said in Securing Linux with Ansible:
I made a really good SaltStack state for Linux hardening. Works great, and now pass OpenVAS with flying colours for example.
Where is the ML article about that?
Damn! I can only upvote this once.
-
Where is the ML article on that?
Now we can upvote it twice
-
@scottalanmiller Done :grinning_face_with_smiling_eyes:
-
And this is why we need a way to post articles/how-to's in something other than a discussion thread. They get lost and forgotten.
-
@kelly said in Securing Linux with Ansible:
And this is why we need a way to post articles/how-to's in something other than a discussion thread. They get lost and forgotten.
Tags help a TON with this. Look up SaltStack tag for example.
-
@tim_g said in Securing Linux with Ansible:
@kelly said in Securing Linux with Ansible:
And this is why we need a way to post articles/how-to's in something other than a discussion thread. They get lost and forgotten.
Tags help a TON with this. Look up SaltStack tag for example.
It helps, but overtime it will still get buried. In addition, if, as happens frequently, the original post receives input from replies, it may no longer be 100% accurate. There is no way to deduce that without reading the entire comment chain. Forums are terrible places to store knowledge imo.
-
@kelly said in Securing Linux with Ansible:
@tim_g said in Securing Linux with Ansible:
@kelly said in Securing Linux with Ansible:
And this is why we need a way to post articles/how-to's in something other than a discussion thread. They get lost and forgotten.
Tags help a TON with this. Look up SaltStack tag for example.
It helps, but overtime it will still get buried. In addition, if, as happens frequently, the original post receives input from replies, it may no longer be 100% accurate. There is no way to deduce that without reading the entire comment chain. Forums are terrible places to store knowledge imo.
That's mostly true, although there are ways to make it work better. Like the Linux Admin book.
-
Hereβs mine based off of the DISA STIGS.