andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

shorten text

Browse Source 
Signed-off-by: Martin Schurz <[email protected]>
This commit is contained in:
Martin Schurz committed 2023-04-11 07:49:38 +02:00
1 parent bc9795c215
commit a5a065f880
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
roles/ssh_hardening/tasks/selinux.yml
+1 -1
View File
@@ -57,7 +57,7 @@
# The following tasks only get executed when selinux is installed, UsePam is # The following tasks only get executed when selinux is installed, UsePam is
# 'yes' and the ssh_password module is installed. See # 'yes' and the ssh_password module is installed. See
# http://danwalsh.livejournal.com/12333.html for more info # http://danwalsh.livejournal.com/12333.html for more info
- name: Remove selinux-policy when Pam is used, because Allowing sshd to read the shadow file directly is considered a potential security risk # noqa no-changed-when - name: Remove selinux-policy when PAM is used, because allowing sshd to read the shadow file is considered a security risk # noqa no-changed-when
ansible.builtin.command: semodule -r ssh_password ansible.builtin.command: semodule -r ssh_password
when: when:
- ssh_use_pam | bool - ssh_use_pam | bool