andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Cleanup old OS-support and simplify vars (#458)

Browse Source 
* use os_family instead of distribution for debian systems

Signed-off-by: rndmh3ro <[email protected]>

* remove tasks related to rhel6 or debian 6

Signed-off-by: rndmh3ro <[email protected]>
This commit is contained in:
Sebastian Gumprich authored and GitHub committed 2021-06-30 13:09:46 +02:00
1 parent 72ec118a6d
commit 4ca4f09453
8 files changed
+6 -25
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

roles/ssh_hardening/templates/opensshd.conf.j2
+1 -5
View File
@@ -103,11 +103,7 @@ LogLevel {{ sshd_log_level }}
UseLogin no
{% endif %}
{% if sshd_version is version('7.5', '<') %}
UsePrivilegeSeparation {{
(ansible_facts.distribution == 'Debian' and ansible_facts.distribution_major_version <= '6')
or (ansible_facts.os_family in ['Oracle Linux', 'RedHat'] and ansible_facts.distribution_major_version <= '6' and not ansible_facts.distribution == 'Amazon')
| ternary(ssh_ps53, ssh_ps59)
}}
UsePrivilegeSeparation {{ ssh_ps59 }}
{% endif %}
LoginGraceTime {{ ssh_login_grace_time }}