add sysctl exclude

Signed-off-by: Martin Schurz <[email protected]>

roles/os_hardening/tasks/sysctl.yml

@@ -68,7 +68,7 @@
         reload: true
         ignoreerrors: true
       with_dict: '{{ sysctl_config }}'
-      when: item.key not in sysctl_unsupported_entries
+      when: item.key not in sysctl_unsupported_entries | default()
   when: ansible_virtualization_type not in ['docker', 'lxc', 'openvz']
 
 - name: Apply ufw defaults