ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-24 14:23:05 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

firewall pkgs to masked as default

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-04-05 13:07:36 +01:00
parent bb7869adad
commit e9d212437a
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
defaults/main.yml
View file

@ -485,13 +485,13 @@ rhel9cis_default_zone: public
rhel9cis_firewalld_nftables_state: masked # Note if absent removes the firewalld pkg dependancy
#### nftables
rhel9cis_nftables_firewalld_state: absent
rhel9cis_nftables_firewalld_state: masked
rhel9cis_nft_tables_autonewtable: true
rhel9cis_nft_tables_tablename: filter
rhel9cis_nft_tables_autochaincreate: true
#### iptables
rhel9cis_iptables_firewalld_state: absent
rhel9cis_iptables_firewalld_state: masked
# Warning Banner Content (issue, issue.net, motd)
rhel9cis_warning_banner: |