configurations-ansible/roles/hardening-basic/defaults/main.yml

12 lines
369 B
YAML

---
# defaults file for hardening-basic
hardening_sshd_enabled: true
hardening_sshd_tcp_forward: false
hardening_sshd_permissions_set_sticky_bit: true
hardening_modprobe_files:
- /etc/modprobe.d/disable-network-filesystems.conf
- /etc/modprobe.d/disable-rare-filesystems.conf
- /etc/modprobe.d/disable-rare-protocols.conf
- /etc/modprobe.d/disable-vivid.conf