mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-24 14:23:05 +00:00
28 lines
787 B
Text
28 lines
787 B
Text
---
|
|
ansible_user: root
|
|
# AIDE cron settings
|
|
rhel9cis_aide_cron:
|
|
cron_user: root
|
|
cron_file: /var/spool/cron/root
|
|
aide_job: '/usr/sbin/aide --check'
|
|
aide_minute: 0
|
|
aide_hour: 5
|
|
aide_day: '*'
|
|
aide_month: '*'
|
|
aide_weekday: '*'
|
|
|
|
rhel9cis_sshd:
|
|
clientalivecountmax: 3
|
|
clientaliveinterval: 300
|
|
ciphers: "aes256-ctr,aes192-ctr,aes128-ctr"
|
|
macs: "hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com"
|
|
logingracetime: 60
|
|
# - make sure you understand the precedence when working with these values!!
|
|
allowusers: vagrant
|
|
allowgroups: vagrant
|
|
denyusers: root
|
|
denygroups: root
|
|
|
|
# Workarounds for Docker
|
|
rhel9cis_skip_for_travis: true
|
|
rhel9cis_selinux_disable: true
|