Implementación de Hardening mediante la herramienta de DevOps Ansible : Implementación de Hardening, mediante Ansible, en un sistema operativo de servidor Linux de base Red Hat.

Abstract

The degree work centers on the implementation of hardening using Ansible on a Red Hat based Linux server operating system. To realize this implementation, a playbook was run on Alma Linux, a controlled node, which is managed by the Ansible control node installed on Fedora. Ansible uses the SSH protocol to establish a secure connection between the two nodes. This playbook contains several tasks designed to strengthen the security of the server operating system and reduce its attack surface. These tasks make use of Ansible modules to manage configuration changes efficiently. The project is divided into five stages. In the first stage, an overview of the project is provided, describing the general and specific objectives, the scope of the work, and finally the theoretical framework. This theoretical framework provides the basis for understanding both the operation of Ansible and the implementation of hardening. Some scanning tools that allow identifying and correcting vulnerabilities in operating systems are described, as well as the different cybersecurity frameworks. The second stage focuses on the research methodology, where the type of research used and the development of the project according to the established objectives are explained. The steps followed to realize the implementation of hardening using Ansible are detailed. In the third stage, the results of the project are presented. This includes the initial identification of vulnerabilities in the operating system through the SCAP Workbench scanning tool, the implementation of solutions using the Ansible playbook and the performance of a final analysis to verify the effectiveness of the implemented measures. The last two stages of the project contain the conclusions based on the results obtained in relation to the stated objectives. In addition, recommendations for future work regarding the implementation of hardening using Ansible on Linux systems are provided.