sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

updated issues and added improvements

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-04-25 16:58:11 +01:00
parent 49ab8c6f9f
commit a8602689b8
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB
7 changed files with 18 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

6
defaults/main.yml
View file

@ -376,9 +376,9 @@ rhel9cis_bootloader_password: random
rhel9cis_set_boot_pass: false
# 1.10/1.11 Set crypto policy (LEGACY, DEFAULT, FUTURE, FIPS)
# Control 1.10 sates not ot use LEGACY and control 1.11 says to use FUTURE or FIPS.
rhel9cis_crypto_policy: "FUTURE"
# 1.10 Set crypto policy DEFAULT
# Control 1.10 states not to use LEGACY
rhel9cis_crypto_policy: "DEFAULT"
# System network parameters (host only OR host and router)
rhel9cis_is_router: false