Mirrors/ansible-collection-hardening
2
0
Fork 0
mirror of https://github.com/dev-sec/ansible-collection-hardening synced 2024-11-10 09:14:18 +00:00
Code Issues Projects Releases Packages Wiki Activity

treat securetty config as an array

Browse source
This commit is contained in:
Dominik Richter 2015-05-11 22:25:01 +02:00
parent fd995bfffe
commit 226c2761f8
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/ansible-os-hardening/templates/securetty.j2
View file

@ -3,4 +3,4 @@
# A list of TTYs, from which root can log in
# see `man securetty` for reference
{{ os_auth_root_ttys }}
{{ "\n".join(os_auth_root_ttys) }}

2
roles/ansible-os-hardening/vars/main.yml
View file

@ -17,7 +17,7 @@ os_auth_timeout: 60
os_auth_allow_homeless: false
os_auth_pam_passwdqc_enable: true
os_auth_pam_passwdqc_options: 'disabled,disabled,16,12,8'
os_auth_root_ttys: '%w(console tty1 tty2 tty3 tty4 tty5 tty6)'
os_auth_root_ttys: [console, tty1, tty2, tty3, tty4, tty5, tty6]
os_auth_uid_min: 1000
os_auth_gid_min: 1000
os_chfn_restrict: ''