add sysctl exclude

Signed-off-by: Martin Schurz <[email protected]>

roles/os_hardening/tasks/sysctl.yml

@@ -48,6 +48,11 @@
         sysctl_config: '{{ sysctl_config | combine(sysctl_custom_config) }}'
       when: sysctl_custom_config | default()
 
+    - name: Remove entries sysctl-dict if os does not support these
+      set_fact:
+        sysctl_config: '{{ sysctl_config | combine(sysctl_unsupported_entries) }}'
+      when: sysctl_unsupported_entries | default()
+
     # sysctl_rhel_config is kept for backwards-compatibility. use sysctl_custom_config instead
     - name: Create a combined sysctl-dict if os-dependent sysctls are defined
       set_fact: