automation: Update devsec.hardening to version 7.16.0

This MR contains the following updates:

Package	Type	Update	Change
devsec.hardening (source)	galaxy-collection	minor	7.14.1 -> 7.16.0

---

Release Notes

dev-sec/ansible-collection-hardening

v7.16.0

Compare Source

Full Changelog

Implemented enhancements:

• revert debian 9 change, only one tls variable now #​562 [nginx_hardening] (rndmh3ro)
• add posibility to run ssh_hardening as unprivileged user #​561 [ssh_hardening] (schurzi)
• add basic support for ubuntu22.04 #​554 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (schurzi)
• Add full support for Debian 11 #​538 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (addianto)

Fixed bugs:

• Replace default 2048 bits RSA keypair fails on Ubuntu 20.04 #​459

Closed issues:

• os-hardening: yum gpg-check fails if gpg-check already set #​556
• Ubuntu 22.04 LTS #​553
• Revert nginx ssl-protocol after deprecation of debian9 #​528
• Support for Debian 11 #​527
• Support baseline-control os-14 #​507

v7.15.1

Compare Source

Full Changelog

Fixed bugs:

• Fix broken mode for /var/log/audit #​552 [os_hardening] (hollow)

Merged pull requests:

• Only run hardening if /var/log/audit exists #​550 [os_hardening] (mego22)

v7.15.0

Compare Source

Full Changelog

Implemented enhancements:

• Harden mountpoints #​531 [os_hardening] (lbayerlein)

Fixed bugs:

• os_hardening gpg-check enabled fails on success #​549 [os_hardening]
• add VM tests for os_hardening #​547 [os_hardening] (schurzi)
• Linting #​546 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (rndmh3ro)

v7.14.3

Compare Source

Full Changelog

Closed issues:

• Version 7.14.2 not released to Ansible Galaxy #​544
• os_hardening role: os_ignore_users not described in the Readme's variable topic #​542
• doc: incorrect description for ssh_client_alive_count #​540
• 'legacy' branch is mentioned in README, but apparently doesn't exist #​539
• ansible_role_name is undefined #​532
• Can't sudo anymore after hardening #​518
• Any planned official support for RHEL/CentOS Stream 9? #​517

Merged pull requests:

• Improve documentation #​541 [ssh_hardening] (schurzi)

v7.14.2

Compare Source

Full Changelog

Fixed bugs:

• debian 9's nginx doesn't support tls1.3 #​526 [nginx_hardening] (rndmh3ro)
• Change permissions of the tmout.sh file #​520 [os_hardening] (abejotaR)

Closed issues:

• No such file directory error triggered by the kernel.unpriviliged_userns_clone configuration. #​514

Merged pull requests:

• delete obsolete release drafts #​530 (schurzi)
• add waivers to skip controls #​529 [os_hardening] (rndmh3ro)
• remove centos8 tests #​525 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (rndmh3ro)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot. The local configuration can be found in the SI Renovate Bot repository.