andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Make tasks clearer

Browse Source
This commit is contained in:
Sebastian Gumprich authored and Christoph Hartmann committed 2015-06-01 14:23:13 +02:00
1 parent 25a49bf688
commit 95bb02edbe
1 file changed
+4 -4
Download Patch File Download Diff File Expand all files Collapse all files
roles/ansible-os-hardening/tasks/sysctl.yml
+4 -4
View File
@@ -1,15 +1,15 @@
---
- name: Only enable IP traffic forwarding, if required.
- name: Disable IPv4 traffic forwarding.
sysctl: name='net.ipv4.ip_forward' value=0 sysctl_set=yes state=present reload=yes ignoreerrors=yes
- name: Only enable IP traffic forwarding, if required.
- name: Enable IPv4 traffic forwarding again, but only if required.
sysctl: name='net.ipv4.ip_forward' value=1 sysctl_set=yes state=present reload=yes ignoreerrors=yes
when: os_network_forwarding
- name: Only enable IP traffic forwarding, if required.
- name: Disable IPv6 traffic forwarding.
sysctl: name='net.ipv6.conf.all.forwarding' value=0 sysctl_set=yes state=present reload=yes ignoreerrors=yes
- name: Only enable IP traffic forwarding, if required.
- name: Enable IPv6 traffic forwarding again, but only if required.
sysctl: name='net.ipv6.conf.all.forwarding' value=1 sysctl_set=yes state=present reload=yes ignoreerrors=yes
when: os_network_forwarding and os_network_ipv6_enable