Added comment on top of template about which role modified the resulting file. https://github.com/dev-sec/ansible-collection-hardening/issues/345

Signed-off-by: Farid Joubbi <[email protected]>
2021-01-19 14:05:33 +01:00
1 parent d01abb44c0
commit 254b62d980
@@ -1,4 +1,5 @@
 # {{ ansible_managed|comment }}
+# Generated by Ansible {{ ansible_role_name }}
 # Additional configuration for Nginx.

 client_header_buffer_size   {{ nginx_client_header_buffer_size }};
@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 log_file = /var/log/audit/audit.log
 log_format = RAW
@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 # /etc/default/ufw
 #
@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 # This file contains the names of kernel modules that should be loaded at boot time, one per line. Lines beginning with "#" are ignored.
 #
@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 # See libuser.conf(5) for more information. 

@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 # Configuration control definitions for the login package.
 #
@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 {% for fs in os_unused_filesystems | difference(os_filesystem_whitelist) %}
 install {{fs}} /bin/true
@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 #%PAM-1.0
 {% if os_auth_retries > 0 %}
@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 # Disable core dumps via soft limits for all users. Compliance to this setting is voluntary and can be modified by users up to a hard limit. This setting is a sane default.
 ulimit -S -c 0 > /dev/null 2>&1
@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 # A list of TTYs, from which root can log in
 # see `man securetty` for reference
@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 # color => new RH6.0 bootup
 # verbose => old-style bootup
@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 Name: passwdqc password strength enforcement
 Default: yes
@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 Name: tally2 lockout after failed attempts enforcement
 Default: yes
@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 {% for principal in item.principals %}
 {{ principal }}
@@ -1,5 +1,6 @@
 #jinja2: trim_blocks: "true", lstrip_blocks: "true"
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 # This is the ssh client system-wide configuration file.
 # See ssh_config(5) for more information on any settings used.
@@ -1,5 +1,6 @@
 #jinja2: trim_blocks: "true", lstrip_blocks: "true"
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 # This is the sshd server system-wide configuration file.
 # See sshd_config(5) for more information.
@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 {% for key in ssh_server_revoked_keys %}
 {{ key }}
@@ -1,4 +1,5 @@
 {{ ansible_managed | comment }}
+# Generated by Ansible {{ ansible_role_name }}

 {% for key in ssh_trusted_user_ca_keys %}
 {{ key }}