2022-02-02 11:25:03 +00:00
|
|
|
---
|
|
|
|
|
# OS Specific Settings
|
|
|
|
|
|
2022-07-25 11:26:27 +01:00
|
|
|
os_gpg_key_pubkey_name: gpg-pubkey-fd431d51-4ae0493b
|
|
|
|
|
os_gpg_key_pubkey_content: "Red Hat, Inc. (release key 2) <security@redhat.com> fd431d51"
|
2023-10-17 13:11:16 +01:00
|
|
|
|
2023-10-17 15:33:02 +01:00
|
|
|
# disable repo_gpgcheck due to OS default repos
|
|
|
|
|
rhel9cis_rule_enable_repogpg: false
|
|
|
|
|
|
2023-10-17 15:08:11 +01:00
|
|
|
# Vars setup for overiding main.yml
|
2023-10-17 13:11:16 +01:00
|
|
|
rhel9cis_sshd:
|
|
|
|
|
clientalivecountmax: 3
|
|
|
|
|
clientaliveinterval: 900
|
|
|
|
|
logingracetime: 60
|
|
|
|
|
# allowusers:
|
2023-10-17 14:17:00 +01:00
|
|
|
allowgroups: sshd wheel
|
2023-10-17 13:11:16 +01:00
|
|
|
# denyusers:
|
2023-10-17 15:08:11 +01:00
|
|
|
# denygroups:
|
2023-10-25 15:03:43 +01:00
|
|
|
usr_min_uid: 1000
|
