The_miro
/
Dotfiles
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Dotfiles/setup/modules/FreeipaAnsible/image
History
Amir Alexander Abdelbaki cd2f1424c7 feat(freeipa-ansible): split login monitoring and add usr_ctl capability grants 
Split usr_mon_logins into three focused checks: failed local (console/
tty/greeter) logins, SSH logins (usr_mon_sshlogins), and sudo/SELinux/
AppArmor rights violations (usr_mon_rightsviolations) — plus a new
usr_mon_iploc check that flags public-IP geolocation country changes.

Add usr_ctl_dnshostfile, usr_ctl_netman, and usr_ctl_wifi policies that
grant members scoped, non-root capability (hosts file ACL, NetworkManager
connection permissions) resolved from IPA group membership and
re-applied every enforcer tick.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 		2026-07-23 09:06:34 +02:00
..
nginx Revert "feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal" 2026-07-22 16:24:31 +02:00
.env.example Revert "feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal" 2026-07-22 16:24:31 +02:00
.gitignore feat(ansipa): integrate CheckMK CE monitoring 2026-07-01 18:32:28 +02:00
Dockerfile Revert "feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal" 2026-07-22 16:24:31 +02:00
ansipa-checkmk-setup.sh feat(freeipa-ansible): split login monitoring and add usr_ctl capability grants 2026-07-23 09:06:34 +02:00
ansipa-checkmk.service feat(ansipa): integrate CheckMK CE monitoring 2026-07-01 18:32:28 +02:00
ansipa-git-add-deploy-key.sh feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-git-server-setup.service feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-git-server-setup.sh feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-git-sshd.service feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-infra-checkmk-install.sh feat(freeipa-ansible): add CheckMK monitoring for Proxmox VE + PBS 2026-07-20 11:31:03 +02:00
ansipa-pbs-monitor.sh feat(freeipa-ansible): add CheckMK monitoring for Proxmox VE + PBS 2026-07-20 11:31:03 +02:00
ansipa-pve-monitor.sh feat(freeipa-ansible): add CheckMK monitoring for Proxmox VE + PBS 2026-07-20 11:31:03 +02:00
ansipa-smb-setup.sh refactor(ansipa): dev_security-scan → dev_mon_clamscan, report to CheckMK; drop SMB scan pipeline 2026-07-02 13:49:18 +02:00
ansipa-smb.service fix(ansipa): full end-to-end test + multiple bug fixes 2026-07-01 10:30:06 +02:00
docker-compose.yml Revert "feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal" 2026-07-22 16:24:31 +02:00
docker-env.service Revert "feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal" 2026-07-22 16:24:31 +02:00
ipa-first-boot.service fix(ansipa): full end-to-end test + multiple bug fixes 2026-07-01 10:30:06 +02:00
ipa-first-boot.sh fix(ansipa): full end-to-end test + multiple bug fixes 2026-07-01 10:30:06 +02:00
keycloak-configure.sh setup: add FreeIPA image builder and Keycloak integration 2026-05-18 11:22:48 +02:00
run.sh Revert "feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal" 2026-07-22 16:24:31 +02:00