---
# defaults file for hardening-basic

hardening_sshd_enabled: true
hardening_sshd_tcp_forward: false
hardening_sshd_permissions_set_sticky_bit: true

hardening_modprobe_files:
  - /etc/modprobe.d/disable-network-filesystems.conf
  - /etc/modprobe.d/disable-rare-filesystems.conf
  - /etc/modprobe.d/disable-rare-protocols.conf
  - /etc/modprobe.d/disable-vivid.conf