The_miro
/
Dotfiles
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Dotfiles/setup
History
Amir Alexander Abdelbaki 45fd7e5d36 feat(freeipa): add policy enforcement for binary blocking, backups, scans, and sudo 
Introduces a FreeIPA host-group-driven policy system alongside a sudo
rules management playbook:

- ansipa-enforce-policies.sh: client-side enforcer (systemd timer, 30 min)
  - policy-block-binary-<name>: PATH-priority wrapper blocks the binary
  - policy-timeshift-backup: daily Timeshift snapshot cron (03:00)
  - policy-security-scan: daily ClamAV/rkhunter/chkrootkit cron (02:00)
  Policies are reversible — leaving a group removes enforcement on next run.

- deploy-ansipa-policies.yml: deploys enforcer + systemd service/timer to clients

- manage-sudo-rules.yml: creates FreeIPA sudo rules (allow_sudoers,
  allow_sudo_nopasswd) that SSSD clients already pick up via --sudo enrollment.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 		2026-05-20 11:34:09 +02:00
..
Setup-shell-4-containers setup: housekeeping — rename, deprecate, fix refs 2026-05-11 15:02:25 +02:00
archiso fix(archiso): move user input before partitioning, fall back to bash on exit 2026-05-20 07:20:14 +02:00
deprecated privacy: remove hardcoded username and AWS signed URL 2026-05-12 14:17:48 +02:00
modules feat(freeipa): add policy enforcement for binary blocking, backups, scans, and sudo 2026-05-20 11:34:09 +02:00
arch-autoinstall.sh fix(setup): port KEYMAPS+vconsole support to auto-installer and answerfile generator 2026-05-20 00:01:19 +02:00
archbaseos-guided-install.sh fix(archiso): move user input before partitioning, fall back to bash on exit 2026-05-20 07:20:14 +02:00
audit-packages.sh setup: fix pamtester/pinta/kew package source categorization 2026-05-11 19:45:33 +02:00
generate-answerfile.sh fix(setup): port KEYMAPS+vconsole support to auto-installer and answerfile generator 2026-05-20 00:01:19 +02:00
install-modules.sh feat(setup): add anti-malware module with freshclam cron job 2026-05-19 19:58:35 +02:00
install.sh setup: add croc to optional apps; fix shell match in tui summary 2026-05-18 03:03:01 +02:00
tui-install.sh feat: add hyprlua config set and migrate hyprland envvars to dedicated file 2026-05-19 08:50:23 +02:00