Added comment on top of template about which role modified the resulting file. https://github.com/dev-sec/ansible-collection-hardening/issues/345

Signed-off-by: Farid Joubbi <[email protected]>
This commit is contained in:
Farid Joubbi committed 2021-01-19 14:05:33 +01:00
1 parent d01abb44c0
commit 254b62d980
18 files changed
+18

No files matched your search

@@ -1,4 +1,5 @@
{{ ansible_managed | comment }}
# Generated by Ansible {{ ansible_role_name }}
log_file = /var/log/audit/audit.log
log_format = RAW
@@ -1,4 +1,5 @@
{{ ansible_managed | comment }}
# Generated by Ansible {{ ansible_role_name }}
# /etc/default/ufw
#
@@ -1,4 +1,5 @@
{{ ansible_managed | comment }}
# Generated by Ansible {{ ansible_role_name }}
# This file contains the names of kernel modules that should be loaded at boot time, one per line. Lines beginning with "#" are ignored.
#
@@ -1,4 +1,5 @@
{{ ansible_managed | comment }}
# Generated by Ansible {{ ansible_role_name }}
# See libuser.conf(5) for more information.
@@ -1,4 +1,5 @@
{{ ansible_managed | comment }}
# Generated by Ansible {{ ansible_role_name }}
# Configuration control definitions for the login package.
#
@@ -1,4 +1,5 @@
{{ ansible_managed | comment }}
# Generated by Ansible {{ ansible_role_name }}
{% for fs in os_unused_filesystems | difference(os_filesystem_whitelist) %}
install {{fs}} /bin/true
@@ -1,4 +1,5 @@
{{ ansible_managed | comment }}
# Generated by Ansible {{ ansible_role_name }}
#%PAM-1.0
{% if os_auth_retries > 0 %}
@@ -1,4 +1,5 @@
{{ ansible_managed | comment }}
# Generated by Ansible {{ ansible_role_name }}
# Disable core dumps via soft limits for all users. Compliance to this setting is voluntary and can be modified by users up to a hard limit. This setting is a sane default.
ulimit -S -c 0 > /dev/null 2>&1
@@ -1,4 +1,5 @@
{{ ansible_managed | comment }}
# Generated by Ansible {{ ansible_role_name }}
# A list of TTYs, from which root can log in
# see `man securetty` for reference
@@ -1,4 +1,5 @@
{{ ansible_managed | comment }}
# Generated by Ansible {{ ansible_role_name }}
# color => new RH6.0 bootup
# verbose => old-style bootup