mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-27 15:33:06 +00:00
18 lines
469 B
YAML
18 lines
469 B
YAML
---
|
|
# OS Specific Settings
|
|
|
|
os_gpg_key_pubkey_name: gpg-pubkey-fd431d51-4ae0493b
|
|
os_gpg_key_pubkey_content: "Red Hat, Inc. (release key 2) <security@redhat.com> fd431d51"
|
|
|
|
# disable repo_gpgcheck due to OS default repos
|
|
rhel9cis_rule_enable_repogpg: false
|
|
|
|
# Vars setup for overiding main.yml
|
|
rhel9cis_sshd:
|
|
clientalivecountmax: 3
|
|
clientaliveinterval: 900
|
|
logingracetime: 60
|
|
# allowusers:
|
|
allowgroups: sshd wheel
|
|
# denyusers:
|
|
# denygroups:
|