claudiomaradonna/configurations-ansible
1
0
Fork 0
forked from unitoo/configurations-ansible
Code Pull requests Activity

new default: coredump hardening sysctl.d; better swappiness default

Browse source
This commit is contained in:
Claudio Maradonna 2024-10-04 19:49:25 +02:00
parent 8630677457
commit caeb23ee45
Signed by: claudiomaradonna
SSH key fingerprint: SHA256:rraT8b7ydWQciRlI237XJB9Odr033PPYcKgP1F4OEX0
2 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/hardening-basic/defaults/main.yml
View file

@ -7,7 +7,7 @@ hardening_sshd_tcp_forward: false
hardening_sshd_legal_banner: false hardening_sshd_legal_banner: false
hardening_sshd_permissions_set_sticky_bit: true hardening_sshd_permissions_set_sticky_bit: true
hardening_sysctl_vm_swappiness: 15 hardening_sysctl_vm_swappiness: 0
hardening_sysctl_disable_ipv6: false hardening_sysctl_disable_ipv6: false
hardening_modprobe_disable_list: hardening_modprobe_disable_list:

1
roles/hardening-basic/templates/basic/etc/sysctl.d/50-coredump.conf Normal file
View file

@ -0,0 +1 @@
kernel.core_pattern=|/bin/false