forked from ansible-lockdown/RHEL9-CIS
35 lines
983 B
YAML
35 lines
983 B
YAML
---
|
|
|
|
- name: "SECTION | 3.1.x | Disable unused network protocols and devices"
|
|
import_tasks: cis_3.1.x.yml
|
|
|
|
- name: "SECTION | 3.2.x | Network Parameters (Host Only)"
|
|
import_tasks: cis_3.2.x.yml
|
|
|
|
- name: "SECTION | 3.3.x | Network Parameters (host and Router)"
|
|
import_tasks: cis_3.3.x.yml
|
|
|
|
- name: "SECTION | 3.4.1.x | Configure firewalld"
|
|
import_tasks: cis_3.4.1.x.yml
|
|
when:
|
|
- rhel9cis_firewall == "firewalld"
|
|
|
|
- name: "SECTION | 3.4.2.x | Configure nftables"
|
|
include_tasks: cis_3.4.2.x.yml
|
|
when:
|
|
- rhel9cis_firewall == "nftables"
|
|
|
|
- name: "SECTION | 3.4.3.1.x | Configure iptables"
|
|
include_tasks: cis_3.4.3.1.x.yml
|
|
when:
|
|
- rhel9cis_firewall == "iptables"
|
|
|
|
- name: "SECTION | 3.4.3.2.x | Configure iptables IPv4"
|
|
include_tasks: cis_3.4.3.2.x.yml
|
|
when:
|
|
- rhel9cis_firewall == "iptables"
|
|
|
|
- name: "SECTION | 3.4.3.3.x | Configure iptables IPv6"
|
|
include_tasks: cis_3.4.3.3.x.yml
|
|
when:
|
|
- ( rhel9cis_firewall == "iptables" and rhel9cis_ipv6_required )
|