forked from ansible-lockdown/RHEL9-CIS
40bc7aa082
* change logic thanks to @rjacobs1990 see #175 Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * thanks to @ipruteani-sie #134 Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * Thanks to @stwongst #125 Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * thanks to @sgomez86 #146 Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * Added updates from #115 Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * removed rp_filter in post added in error Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * updated yamllint precommit Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * updated fqcn fo json_query Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * updated Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> * fix typo for virt type query Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> --------- Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
19 lines
379 B
YAML
19 lines
379 B
YAML
---
|
|
# vars file for RHEL9-CIS
|
|
|
|
min_ansible_version: 2.10.1
|
|
rhel9cis_allowed_crypto_policies:
|
|
- 'DEFAULT'
|
|
- 'FUTURE'
|
|
- 'FIPS'
|
|
|
|
rhel9cis_allowed_crypto_policies_modules:
|
|
- 'OSPP'
|
|
- 'AD-SUPPORT'
|
|
- 'AD-SUPPORT-LEGACY'
|
|
|
|
# Used to control warning summary
|
|
warn_control_list: ""
|
|
warn_count: 0
|
|
|
|
gpg_key_package: "{{ ansible_facts.distribution | lower }}-gpg-keys"
|