Owner

dev-sec

12 indexed repositories · View on GitHub

ansible-collection-hardening
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

Jinja · 5476 stars
linux-baseline
DevSec Linux Baseline - InSpec Profile

Ruby · 875 stars
chef-os-hardening
This chef cookbook provides numerous security-related configurations, providing all-round base protection.

Ruby · 453 stars
hardening
DevSec Examples

Ruby · 355 stars
chef-ssh-hardening
This chef cookbook provides secure ssh-client and ssh-server configurations.

Ruby · 168 stars
chef-windows-hardening
This chef cookbook provides windows hardening configurations for the DevSec Windows baseline profile.

Ruby · 107 stars
chef-postgres-hardening
This chef cookbook provides security configuration for PostgreSQL.

Ruby · 28 stars
docker-ansible
Docker containers that include ansible latest stable 2.x version.

Dockerfile · 27 stars
chef-mysql-hardening
This chef cookbook provides security configuration for mysql.

Ruby · 27 stars
chef-apache-hardening

Ruby · 25 stars
dev-sec.github.io
project website

SCSS · 22 stars
.github

2 stars

Beginner friendly Everything

Open All

SSH PermitRootLogin being rendered as False Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

dev-sec/ansible-collection-hardening#979 · 1 comment · Opened Sep 18, 2026
Make /etc/sudoers file permissions configurable Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 72/100

dev-sec/ansible-collection-hardening#977 · Opened Sep 17, 2026
Documentation update for password logins - ssh_max_auth_retries Open

enhancement

Difficulty 1/5 1-3 hours Newbie friendliness 78/100

dev-sec/ansible-collection-hardening#952 · Opened Jun 12, 2026
Controls for blocking kernel modules to reduce kernel attack surface Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

dev-sec/linux-baseline#191 · 2 comments · Opened May 20, 2026
Ensure secure permissions on "group-" and "passwd-" files are set Open

enhancement

Difficulty 2/5 Half a day Newbie friendliness 72/100

dev-sec/ansible-collection-hardening#944 · Opened Apr 21, 2026
Task "Ensure ssh service is started after disabling socket activation" fails Open

bug ssh_hardening

Difficulty 3/5 1-2 days Newbie friendliness 52/100

dev-sec/ansible-collection-hardening#941 · 12 comments · 2 reactions · Opened Mar 30, 2026
Deprecation warning on Set option hidepid for proc filesystem regarding to_bytes and to_native Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

dev-sec/ansible-collection-hardening#936 · Opened Feb 28, 2026
Request: Variable to override "even_deny_root" default setting Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

dev-sec/ansible-collection-hardening#923 · Opened Dec 7, 2025
os-hardening: Restrictive permissions on pam configuration breaks pam services running as user Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#922 · Opened Dec 2, 2025
Should SSH server compression default be reevaluated? Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

dev-sec/ansible-collection-hardening#921 · 1 reaction · Opened Dec 1, 2025
[os_hardening] Move pwquality and pwhistory configs from /etc/pam.d/* to /etc/security/*.conf Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#912 · Opened Nov 5, 2025
[os_hardening] Rebuild initramfs is removed but handler still present Open

enhancement

Difficulty 1/5 Under an hour Newbie friendliness 58/100

dev-sec/ansible-collection-hardening#911 · Opened Nov 5, 2025
ssh-hardening disables IPv6 for ssh by default Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

dev-sec/ansible-collection-hardening#906 · 1 comment · Opened Oct 11, 2025
Arch Linux does not support PrintLastLog sshd option anymore Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

dev-sec/ansible-collection-hardening#896 · 3 comments · Opened Aug 12, 2025
Adding new kex method / EC2 Instance connect supports Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 45/100

dev-sec/ansible-collection-hardening#883 · Opened Jul 24, 2025
ssh_hardening role may fail if default host keys are missing on Debian/Ubuntu Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#880 · Opened Jul 18, 2025
Wrong ssh_host_keys_group used in RHEL 9 Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

dev-sec/ansible-collection-hardening#874 · Opened May 31, 2025
os hardening fails some tasks when system_users is undefined Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 52/100

dev-sec/ansible-collection-hardening#857 · Opened Mar 18, 2025
ssh_hardening - ansible_pkg wrongly selects atomic_container as packagemanager for rpm_ostree systems Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#855 · 2 comments · 1 reaction · Opened Mar 14, 2025
[ssh_hardening] AllowUsers passing user with brackets Open

bug

dev-sec/ansible-collection-hardening#838 · 2 comments · 1 assignee · Opened Jan 9, 2025
/etc/pam.d changes breaks authselect and FreeIPA changes Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 45/100

dev-sec/ansible-collection-hardening#836 · 1 comment · Opened Jan 2, 2025
os-14: Check mountpoints for noexec mount options (1 failed) Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

dev-sec/ansible-collection-hardening#833 · 1 comment · Opened Dec 18, 2024
Auditd restart broken on Redhat Linux Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 42/100

dev-sec/ansible-collection-hardening#827 · Opened Nov 20, 2024
Support Fedora 41 and 42 Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#816 · 2 comments · 3 reactions · Opened Oct 31, 2024
os_hardening: /tmp privs erroneously apply as 03361 Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

dev-sec/ansible-collection-hardening#803 · 1 comment · Opened Oct 8, 2024
Disabled ssh.socket causes failure of ubuntu upgrade to 24.04 Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 48/100

dev-sec/ansible-collection-hardening#793 · 1 comment · Opened Sep 13, 2024
Add two additional PATH env checks for the rule 'os-04' Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 58/100

dev-sec/linux-baseline#188 · Opened Aug 21, 2024
Allow skipping /proc mount options management Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 45/100

dev-sec/ansible-collection-hardening#780 · 1 comment · 5 reactions · Opened Jul 16, 2024
use pam_faillock rather than deprecated pam_tally2 Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/chef-os-hardening#316 · Opened Jun 17, 2024
OpenRC missing from alpine-ansible-latest Open

Difficulty 3/5 1-2 days Newbie friendliness 38/100

dev-sec/docker-ansible#46 · 1 reaction · Opened Apr 3, 2024
Add pam.d flags to maintain compatiblity with FreeIPA deployments. Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#753 · 1 comment · Opened Mar 21, 2024
Task "Configure hardened options for mounts" overrides fstab entries with UUID or LABEL as source with device path Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

dev-sec/ansible-collection-hardening#748 · 2 comments · Opened Feb 23, 2024
syslog-group not existing in Ubuntu 22.04 minimal Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#746 · 1 comment · 2 reactions · Opened Feb 14, 2024
Test multiple supported Ansible versions Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#729 · 2 comments · Opened Dec 5, 2023
Feature Request: Alpine support for ssh hardening Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 38/100

dev-sec/ansible-collection-hardening#724 · 1 comment · 4 reactions · Opened Nov 25, 2023
No such file directory error triggered by the kernel.unprivileged_userns_clone configuration Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 25/100

dev-sec/ansible-collection-hardening#723 · 1 comment · Opened Nov 22, 2023
Job for auditd.service invalid Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 25/100

dev-sec/ansible-collection-hardening#716 · 4 comments · Opened Nov 16, 2023
Reduce Image sizes Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

dev-sec/docker-ansible#42 · 4 comments · Opened Oct 25, 2023
Dependency Dashboard Open

Difficulty 3/5 1-2 days Newbie friendliness 20/100

dev-sec/chef-os-hardening#305 · Opened Sep 4, 2023
Fix pam tests Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

dev-sec/ansible-collection-hardening#690 · 1 comment · Opened Aug 7, 2023
Use reusable workflows Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

dev-sec/docker-ansible#29 · Opened Jun 14, 2023
Dependency Dashboard Open

Difficulty 4/5 3-5 days Newbie friendliness 15/100

dev-sec/docker-ansible#25 · Opened Jun 10, 2023
[os-hardening] libpam-modules version check for the "Configure tally2" breaks with newer version. Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 42/100

dev-sec/ansible-collection-hardening#665 · 1 comment · Opened Apr 21, 2023
Complete tests for SSH hardening Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 42/100

dev-sec/ansible-collection-hardening#661 · Opened Apr 11, 2023
Complete tests for nginx hardening Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 42/100

dev-sec/ansible-collection-hardening#659 · Opened Apr 11, 2023
Complete tests for MySQL hardening Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 35/100

dev-sec/ansible-collection-hardening#658 · Opened Apr 11, 2023
Dependency Dashboard Open

Difficulty 1/5 Under an hour Newbie friendliness 10/100

dev-sec/chef-windows-hardening#60 · Opened Apr 3, 2023
Dependency Dashboard Open

Difficulty 4/5 3-5 days Newbie friendliness 10/100

dev-sec/chef-ssh-hardening#244 · Opened Apr 3, 2023
Dependency Dashboard Open

Difficulty 2/5 1-3 hours Newbie friendliness 25/100

dev-sec/dev-sec.github.io#66 · Opened Mar 31, 2023
Dependency Dashboard Open

Difficulty 5/5 Over a week Newbie friendliness 10/100

dev-sec/chef-mysql-hardening#40 · Opened Mar 31, 2023

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

dev-sec

Showing the newest 100

Get new issues in your inbox