Mirrors/ansible-collection-hardening
2
0
Fork 0
mirror of https://github.com/dev-sec/ansible-collection-hardening synced 2024-11-10 09:14:18 +00:00
Code Issues Projects Releases Packages Wiki Activity

use tests with -G instead of extended so sshd does not need to run

Browse source 
Signed-off-by: Sebastian Gumprich <rndmh3ro@users.noreply.github.com>
This commit is contained in:
Sebastian Gumprich 2024-05-27 15:39:18 +02:00
parent 13c40f66ad
commit d14b24303d
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/ssh_hardening/tasks/hardening.yml
View file

@ -67,7 +67,7 @@
mode: "0600"
owner: "{{ ssh_owner }}"
group: "{{ ssh_group }}"
validate: "{{ sshd_path }} -G -C user=root -C host=localhost -C addr=localhost -C lport=22 -f %s"
validate: "{{ sshd_path }} -G -f %s"
notify: Restart sshd
when: ssh_server_hardening | bool