mirror of
https://github.com/dev-sec/ansible-collection-hardening
synced 2024-11-10 09:14:18 +00:00
install modprobe package,
check for modprobe use apt and yum instead of package Revert "use apt and yum instead of package" This reverts commit 215a97b1867a7a8af5e0e64e9f77181d4c4a5050. use latest to install kmod run apt-get update
This commit is contained in:
parent
db517e9539
commit
8f7c7ba84c
3 changed files with 8 additions and 2 deletions
|
@ -1,8 +1,8 @@
|
|||
---
|
||||
- name: install modprobe to disable filesystems | os-10
|
||||
package:
|
||||
name: 'kmod'
|
||||
state: 'present'
|
||||
name: '{{modpprobe_package}}'
|
||||
state: 'installed'
|
||||
|
||||
- name: disable unused filesystems | os-10
|
||||
template:
|
||||
|
|
|
@ -5,6 +5,8 @@ passwdqc_path: '/usr/share/pam-configs/passwdqc'
|
|||
tally2_path: '/usr/share/pam-configs/tally2'
|
||||
os_nologin_shell_path: '/usr/sbin/nologin'
|
||||
|
||||
modprobe_package: 'kmod'
|
||||
|
||||
# Different distros use different standards for /etc/shadow perms, e.g.
|
||||
# RHEL derivatives use root:root 0600, whereas Debian-based use root:shadow 0640.
|
||||
# You must provide key/value pairs for owner, group, and mode if overriding.
|
||||
|
@ -17,3 +19,4 @@ os_passwd_perms:
|
|||
owner: root
|
||||
group: root
|
||||
mode: '0644'
|
||||
|
||||
|
|
|
@ -1,4 +1,7 @@
|
|||
---
|
||||
|
||||
modprobe_package: 'module-init-tools'
|
||||
|
||||
sysctl_rhel_config:
|
||||
# ExecShield protection against buffer overflows
|
||||
kernel.exec-shield: 1
|
||||
|
|
Loading…
Reference in a new issue