{% for section in hardening_modprobe_disable_list %} # Disable for {{ section }} {% for item in hardening_modprobe_disable_list[section] %} install {{ item }} /bin/false {% endfor %} {% endfor %}