forked from ansible-lockdown/RHEL9-CIS
removed not required files
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
f808f30173
commit
dc5f71d461
7 changed files with 0 additions and 367 deletions
|
|
@ -1,54 +0,0 @@
|
|||
---
|
||||
|
||||
- name: "1.6.1 | L1 | PATCH | Ensure core dumps are restricted"
|
||||
block:
|
||||
- name: "1.6.1 | L1 | Ensure core dumps are restricted | Update limits.conf file"
|
||||
lineinfile:
|
||||
state: present
|
||||
dest: /etc/security/limits.conf
|
||||
regexp: '^#?\\*.*core'
|
||||
line: '* hard core 0'
|
||||
insertbefore: '^# End of file'
|
||||
|
||||
- name: "1.6.1 | L1 | PATCH | Ensure core dumps are restricted | Set active kernel parameter"
|
||||
debug:
|
||||
msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/99-sysctl.conf"
|
||||
notify:
|
||||
- update sysctl
|
||||
|
||||
- name: "1.6.1 | L1 | PATCH | Ensure core dumps are restricted | if systemd coredump"
|
||||
lineinfile:
|
||||
path: /etc/systemd/coredump.conf
|
||||
regexp: "{{ item.regexp }}"
|
||||
line: "{{ item.regexp }}{{ item.line }}"
|
||||
state: present
|
||||
with_items:
|
||||
- {'regexp': 'Storage=', 'line': 'none'}
|
||||
- {'regexp': 'ProcessSizeMax=', 'line': '0'}
|
||||
notify:
|
||||
- systemd_daemon_reload
|
||||
when:
|
||||
- systemd_coredump.stat.exists
|
||||
when:
|
||||
- rhel9cis_rule_1_6_1
|
||||
tags:
|
||||
- level1-server
|
||||
- level1-workstation
|
||||
- scored
|
||||
- sysctl
|
||||
- patch
|
||||
- rule_1.6.1
|
||||
|
||||
- name: "1.6.2 | L1 | PATCH | Ensure address space layout randomization (ASLR) is enabled"
|
||||
debug:
|
||||
msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/99-sysctl.conf"
|
||||
notify:
|
||||
- update sysctl
|
||||
when:
|
||||
- rhel9cis_rule_1_6_2
|
||||
tags:
|
||||
- level1-server
|
||||
- level1-workstation
|
||||
- scored
|
||||
- patch
|
||||
- rule_1.6.2
|
||||
Loading…
Add table
Add a link
Reference in a new issue