From 1de25a4e983e58a6d76a1a4263d85d04d1a2106d Mon Sep 17 00:00:00 2001
From: Benjamin Hays <ben@benhays.org>
Date: Wed, 14 Aug 2024 11:54:46 -0400
Subject: [PATCH] Add Placeholder Debian Hardening Playbook

---
 Ansible/debian.yml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 Ansible/debian.yml

diff --git a/Ansible/debian.yml b/Ansible/debian.yml
new file mode 100644
index 0000000..0da7091
--- /dev/null
+++ b/Ansible/debian.yml
@@ -0,0 +1,18 @@
+---
+- name: Debian Hardening
+  hosts: linux
+  remote_user: bhays
+  become: true
+  become_user: root
+  tasks:
+    - name: Update/install Debian Utilities
+      ansible.builtin.apt:
+        name:
+          - "apt-listchanges"
+          - "needrestart"
+          - "libpam-tmpdir"
+          - "debsums"
+          - "apt-show-versions"
+        state: latest
+        update_cache: true
+    # TODO: Harden /etc/protocols, PAM configuration, /etc/login.defs, pam_cracklib, auto upgrades, banner to /etc/issue, auditd/sysstat, chkrootkit