Mirrors/ansible-collection-hardening
2
0
Fork 0
mirror of https://github.com/dev-sec/ansible-collection-hardening synced 2024-11-10 09:14:18 +00:00
Code Issues Projects Releases Packages Wiki Activity

add passwd vars

Browse source
This commit is contained in:
Sebastian Gumprich 2017-08-06 21:37:26 +02:00
parent 41feffdc17
commit e879831819
3 changed files with 14 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
vars/Debian.yml
View file

@ -12,3 +12,8 @@ os_shadow_perms:
owner: root
group: shadow
mode: '0640'
os_passwd_perms:
owner: root
group: root
mode: '0644'

5
vars/Oracle Linux.yml
View file

@ -10,3 +10,8 @@ os_shadow_perms:
owner: root
group: root
mode: '0600'
os_passwd_perms:
owner: root
group: root
mode: '0644'

9
vars/RedHat.yml
View file

@ -11,8 +11,7 @@ os_shadow_perms:
group: root
mode: '0600'
sysctl_rhel_config:
# ExecShield protection against buffer overflows
kernel.exec-shield: 1
# Syncookies is used to prevent SYN-flooding attacks.
net.ipv4.tcp_syncookies: 1
os_passwd_perms:
owner: root
group: root
mode: '0644'