4
0
Fork 0

lint and v2 initial

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2024-07-24 14:02:05 +01:00
parent 42aa624d50
commit a36a84c5ea
No known key found for this signature in database
GPG key ID: 997FF7FE93AEB5B9
5 changed files with 712 additions and 676 deletions

View file

@ -5,36 +5,36 @@
ansible.builtin.shell: sysctl --system
- name: Sysctl flush ipv4 route table
ansible.posix.sysctl:
name: net.ipv4.route.flush
value: '1'
sysctl_set: true
ignore_errors: true # noqa ignore-errors
when:
- rhel9cis_flush_ipv4_route
- not system_is_container
- rhel9cis_flush_ipv4_route
- not system_is_container
ansible.posix.sysctl:
name: net.ipv4.route.flush
value: '1'
sysctl_set: true
ignore_errors: true # noqa ignore-errors
- name: Sysctl flush ipv6 route table
ansible.posix.sysctl:
name: net.ipv6.route.flush
value: '1'
sysctl_set: true
when:
- rhel9cis_flush_ipv6_route
- not system_is_container
- rhel9cis_flush_ipv6_route
- not system_is_container
ansible.posix.sysctl:
name: net.ipv6.route.flush
value: '1'
sysctl_set: true
- name: Systemd restart tmp.mount
ansible.builtin.systemd:
name: tmp.mount
daemon_reload: true
enabled: true
masked: false
state: reloaded
name: tmp.mount
daemon_reload: true
enabled: true
masked: false
state: reloaded
- name: Remount tmp
ansible.posix.mount:
path: /tmp
state: remounted
path: /tmp
state: remounted
- name: Update Crypto Policy
ansible.builtin.set_fact: