{"push_id":1262333486,"size":11,"distinct_size":3,"ref":"refs/heads/support-custom-config-file","head":"de7c733db4ae2fd822cd0a288e267ddba8e020b0","before":"da28686527ac154a510e77b8e1ccb96a26069c26","commits":[{"sha":"adfa291b0edbb46522d0e32b52fafacd0263b70a","author":{"name":"Conor Schaefer","email":"e999bb66574e3f9fb10f9c124754b1c6eebd46ac@gmail.com"},"message":"Makes reboot optional in install role\n\nSimply override the `grsecurity_install_reboot: true` var. If installing\non localhost (grsecurity is nice to have on your Ansible controller,\ntoo!), then assume we don't want to reboot, and instead display a\nhelpful message explaining the need to reboot.","distinct":false,"url":"https://api.github.com/repos/freedomofpress/ansible-role-grsecurity/commits/adfa291b0edbb46522d0e32b52fafacd0263b70a"},{"sha":"f128b11578688eafcaf77873437cc928abebfc49","author":{"name":"Conor","email":"e999bb66574e3f9fb10f9c124754b1c6eebd46ac@gmail.com"},"message":"Merge pull request #59 from conorsch/optional-reboot-for-install-role\n\nMakes reboot optional in install role","distinct":false,"url":"https://api.github.com/repos/freedomofpress/ansible-role-grsecurity/commits/f128b11578688eafcaf77873437cc928abebfc49"},{"sha":"00a7601a5897358a8ba10b451aae451239311ab6","author":{"name":"Conor Schaefer","email":"bd5f35ce7a6f74df66338e30eb7d51ed0d617b12@freedom.press"},"message":"Smarter inference of privileges on remote host\n\nThe task previously referenced \"ansible_ssh_user\" and \"ansible_user_id\"\nas a surrogates for checking whether the role was run with \"sudo\". As of\nAnsible v2.0.2, however, \"ansible_ssh_user\" is now \"null\" unless\nexplicitly set, so we can't assume it'll be defined any longer. Let's\nfall back to \"ansible_env.USER\", which requires fact gathering, but is\nmore resilient.\n\nThe slight modification to the folding scalar operator in the \"msg\"\nparameter of the debug task is to strip the trailing newline on the\nmessage in Ansible v2. The change is backwards compatible with v1.","distinct":false,"url":"https://api.github.com/repos/freedomofpress/ansible-role-grsecurity/commits/00a7601a5897358a8ba10b451aae451239311ab6"},{"sha":"346f674580ca354a1f874c8805670da73727161f","author":{"name":"Conor Schaefer","email":"bd5f35ce7a6f74df66338e30eb7d51ed0d617b12@freedom.press"},"message":"Removes use of \"ansible_ssh_user\" from file perms\n\nCreating the directory without explicit permissions will default to the\numask for ansible_env.USER, which is appropriate. It will NOT try to\ncreate files and directories as root, since the first task of the build\nrole errors out if the role is being run with \"become: yes\".","distinct":false,"url":"https://api.github.com/repos/freedomofpress/ansible-role-grsecurity/commits/346f674580ca354a1f874c8805670da73727161f"},{"sha":"c6dd1f90e30defbb2a320932dc83b213bcd65ab6","author":{"name":"Conor","email":"e999bb66574e3f9fb10f9c124754b1c6eebd46ac@gmail.com"},"message":"Merge pull request #63 from freedomofpress/refactor-elevated-privileges-for-ansible-v2\n\nUpdates elevated privileges logic for Ansible v2","distinct":false,"url":"https://api.github.com/repos/freedomofpress/ansible-role-grsecurity/commits/c6dd1f90e30defbb2a320932dc83b213bcd65ab6"},{"sha":"6276525c5854841c70ac6727b0c82571d4284fe0","author":{"name":"Kevin Gallagher","email":"4f8256ed59811c7dd7ca32acad9a4d5484fc1d6c@freedom.press"},"message":"Bumps bundled DigitalOcean grsec config to 3.14.72","distinct":false,"url":"https://api.github.com/repos/freedomofpress/ansible-role-grsecurity/commits/6276525c5854841c70ac6727b0c82571d4284fe0"},{"sha":"60b576c04b1f8ff034480cf505f82819dd8bb0fd","author":{"name":"Conor Schaefer","email":"bd5f35ce7a6f74df66338e30eb7d51ed0d617b12@freedom.press"},"message":"Fixes \"stable\" patch type in grsecurity_urls module\n\nThe grsecurity facts module was incorrectly using the \"stable2\" patch type.\nThat's still an option, but it must be explicitly referenced with\n\"stable2\", since \"stable\" is a different set of patches altogether.\nThe \"test\" patch support remains unchanged.","distinct":false,"url":"https://api.github.com/repos/freedomofpress/ansible-role-grsecurity/commits/60b576c04b1f8ff034480cf505f82819dd8bb0fd"},{"sha":"a0efb5358791b1bfb0cf498ca0c1bfc352be590e","author":{"name":"Conor","email":"78281d988d4914dba0b09ea6fb297a84abd92288@users.noreply.github.com"},"message":"Merge pull request #66 from freedomofpress/update-grsecurity-patch-types\n\nFixes \"stable\" patch type in grsecurity_urls module","distinct":false,"url":"https://api.github.com/repos/freedomofpress/ansible-role-grsecurity/commits/a0efb5358791b1bfb0cf498ca0c1bfc352be590e"},{"sha":"d068ef099931d72da09c9e26b45c455c30281bbc","author":{"name":"Conor Schaefer","email":"e999bb66574e3f9fb10f9c124754b1c6eebd46ac@gmail.com"},"message":"Creates new default var in build role for custom config\n\nWill override the `grsecurity_build_strategy` var.","distinct":true,"url":"https://api.github.com/repos/freedomofpress/ansible-role-grsecurity/commits/d068ef099931d72da09c9e26b45c455c30281bbc"},{"sha":"dec88e2d69aeaae0d8e7f10457ff5923ab70e12a","author":{"name":"Conor Schaefer","email":"bd5f35ce7a6f74df66338e30eb7d51ed0d617b12@freedom.press"},"message":"Writes custom config file to remote host\n\nPriority for a custom config file overrides the \"strategy\" for the\nbuild, which references built-in configs that ship with the role.","distinct":true,"url":"https://api.github.com/repos/freedomofpress/ansible-role-grsecurity/commits/dec88e2d69aeaae0d8e7f10457ff5923ab70e12a"},{"sha":"de7c733db4ae2fd822cd0a288e267ddba8e020b0","author":{"name":"Conor Schaefer","email":"bd5f35ce7a6f74df66338e30eb7d51ed0d617b12@freedom.press"},"message":"Continue with compilation despite manual strategy\n\nIf a custom config is defined, continue with the compile tasks.\nWill still need to rename the filename var on the deb package so it\ndoesn't say \"custom\".","distinct":true,"url":"https://api.github.com/repos/freedomofpress/ansible-role-grsecurity/commits/de7c733db4ae2fd822cd0a288e267ddba8e020b0"}]}
{"actor":{"display_login":"conorsch"}}