Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
J
joohanhong
Project
Project
Details
Activity
Releases
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
JooHan Hong
joohanhong
Commits
2cd02a00
Commit
2cd02a00
authored
Mar 08, 2021
by
JooHan Hong
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
ansible, 2021-03-08, update16
parent
869cee43
Pipeline
#5125
passed with stages
in 2 seconds
Changes
7
Pipelines
1
Hide whitespace changes
Inline
Side-by-side
Showing
7 changed files
with
45 additions
and
1 deletion
+45
-1
README.md
ANSIBLE/MISC/README.md
+12
-0
.gitkeep
ANSIBLE/OS/FILE_COPY/.gitkeep
+0
-0
.gitkeep
ANSIBLE/OS/FILE_FETCH/.gitkeep
+0
-0
README.md
ANSIBLE/OS/README.md
+3
-0
.gitkeep
ANSIBLE/OS/ZABBIX/.gitkeep
+0
-0
README.md
ANSIBLE/README.md
+0
-1
README.md
ANSIBLE/SECURE/README.md
+30
-0
No files found.
ANSIBLE/MISC/README.md
0 → 100644
View file @
2cd02a00
[
![logo
](
https://www.hongsnet.net/images/logo.gif
)
](https://www.hongsnet.net)
# Ansible 활용
> MISC로 분류된 Maintenance 작업을 수행한다.
# Table of Contents
| NO | ITEM | Content | 비고 |
| ------ | ------ | ------ | ------ |
| 1 | Nginx Install |
[
GO
](
./Nginx/
)
| |
| 2 | Nginx Config Deploy |
[
GO
](
./Config/
)
| |
ANSIBLE/
MISC/FACTS
/.gitkeep
→
ANSIBLE/
OS/FILE_COPY
/.gitkeep
View file @
2cd02a00
File moved
ANSIBLE/
MISC/FILE
/.gitkeep
→
ANSIBLE/
OS/FILE_FETCH
/.gitkeep
View file @
2cd02a00
File moved
ANSIBLE/OS/README.md
View file @
2cd02a00
...
...
@@ -12,3 +12,6 @@
| 2 | OS Package Installing (apt) |
[
GO
](
./APT/
)
| |
| 3 | OS Minimal Packages Installing (apt) |
[
GO
](
./APT/MINIMAL/
)
| |
| 4 | OS Package Installing (yum) |
[
GO
](
./YUM/
)
| |
| 5 | OS File Fetch |
[
GO
](
./FILE_FETCH/
)
| |
| 6 | OS File Copy |
[
GO
](
./FILE_COPY/
)
| |
| 7 | Zabbix-Agent Installing |
[
GO
](
./ZABBIX/
)
| |
ANSIBLE/
MISC
/ZABBIX/.gitkeep
→
ANSIBLE/
OS
/ZABBIX/.gitkeep
View file @
2cd02a00
File moved
ANSIBLE/README.md
View file @
2cd02a00
...
...
@@ -15,7 +15,6 @@
| 5 | Users Management ITEMs |
[
GO
](
./USER/
)
| |
| 6 | Virtualization Maintenance ITEMs |
[
GO
](
./VM/
)
| |
| 7 | Secure Vulnerability ITEMs |
[
GO
](
./SECURE/
)
| |
| 8 | MISC ITEMs |
[
GO
](
./MISC/
)
| |
# Overview
...
...
ANSIBLE/SECURE/README.md
0 → 100644
View file @
2cd02a00
[
![logo
](
https://www.hongsnet.net/images/logo.gif
)
](https://www.hongsnet.net)
# Ansible 활용
> OS 보안취약점 조치작업을 수행한다.
# Table of Contents
| NO | ITEM | Content | 비고 |
| ------ | ------ | ------ | ------ |
| 1 | MariaDB Install |
[
GO
](
./MariaDB/
)
| |
| 2 | OS Package Installing (apt) |
[
GO
](
./APT/
)
| |
1.
/etc/securetty, 권한점검
2.
/etc/ssh/sshd_config, 설정 취약점
3.
pam_common, 패스워드 취약점
4.
pam_tally2, 설정 취약점
5.
/etc/passwd, /etc/group, /etc/shadow, 파일의 권한 취약점
6.
/etc/hosts, 파일의 권한 취약점
7.
suid,sgid,sticky, 설정 bit 제거 및 적용
8.
cron deny 설정
9.
su, pam_wheel 모듈적용 취약점
10.
login_defs, 설정 취약점
11.
issue_motd, 설정 취약점
12.
rsyslog, 설정 취약점
13.
/etc/profile, TMOUT 설정취약점
14.
Banner 설정 취약점
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment