From 2bf95bf3dabf6a3eb2debf6e2334d36cab24bcc2 Mon Sep 17 00:00:00 2001 From: Mark Bolwell Date: Tue, 5 Apr 2022 10:08:42 +0100 Subject: [PATCH] default mask nftable for firewalld Signed-off-by: Mark Bolwell --- defaults/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/defaults/main.yml b/defaults/main.yml index d4f5394..3effee2 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -484,7 +484,7 @@ rhel9cis_firewall: firewalld ##### firewalld rhel9cis_default_zone: public -rhel9cis_firewalld_nftables_state: absent +rhel9cis_firewalld_nftables_state: masked # Note if absent removes the firewalld pkg dependancy #### nftables rhel9cis_nftables_firewalld_state: absent