forked from ansible-lockdown/RHEL9-CIS
lint and v2 initial
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
42aa624d50
commit
a36a84c5ea
5 changed files with 712 additions and 676 deletions
|
|
@ -5,36 +5,36 @@
|
|||
ansible.builtin.shell: sysctl --system
|
||||
|
||||
- name: Sysctl flush ipv4 route table
|
||||
ansible.posix.sysctl:
|
||||
name: net.ipv4.route.flush
|
||||
value: '1'
|
||||
sysctl_set: true
|
||||
ignore_errors: true # noqa ignore-errors
|
||||
when:
|
||||
- rhel9cis_flush_ipv4_route
|
||||
- not system_is_container
|
||||
- rhel9cis_flush_ipv4_route
|
||||
- not system_is_container
|
||||
ansible.posix.sysctl:
|
||||
name: net.ipv4.route.flush
|
||||
value: '1'
|
||||
sysctl_set: true
|
||||
ignore_errors: true # noqa ignore-errors
|
||||
|
||||
- name: Sysctl flush ipv6 route table
|
||||
ansible.posix.sysctl:
|
||||
name: net.ipv6.route.flush
|
||||
value: '1'
|
||||
sysctl_set: true
|
||||
when:
|
||||
- rhel9cis_flush_ipv6_route
|
||||
- not system_is_container
|
||||
- rhel9cis_flush_ipv6_route
|
||||
- not system_is_container
|
||||
ansible.posix.sysctl:
|
||||
name: net.ipv6.route.flush
|
||||
value: '1'
|
||||
sysctl_set: true
|
||||
|
||||
- name: Systemd restart tmp.mount
|
||||
ansible.builtin.systemd:
|
||||
name: tmp.mount
|
||||
daemon_reload: true
|
||||
enabled: true
|
||||
masked: false
|
||||
state: reloaded
|
||||
name: tmp.mount
|
||||
daemon_reload: true
|
||||
enabled: true
|
||||
masked: false
|
||||
state: reloaded
|
||||
|
||||
- name: Remount tmp
|
||||
ansible.posix.mount:
|
||||
path: /tmp
|
||||
state: remounted
|
||||
path: /tmp
|
||||
state: remounted
|
||||
|
||||
- name: Update Crypto Policy
|
||||
ansible.builtin.set_fact:
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue