andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

minor fixups

Browse Source 
Signed-off-by: Martin Schurz <[email protected]>
This commit is contained in:
Martin Schurz committed 2025-02-07 19:57:21 +01:00
1 parent 9f48cf4bbc
commit dfdbeaa247
2 files changed
+2 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

.config/ansible-lint.yml
+1 -1
View File
@@ -3,9 +3,9 @@
# exclude_paths included in this file are parsed relative to this file's location # exclude_paths included in this file are parsed relative to this file's location
# and not relative to the CWD of execution. CLI arguments passed to the --exclude # and not relative to the CWD of execution. CLI arguments passed to the --exclude
# option will be parsed relative to the CWD of execution. # option will be parsed relative to the CWD of execution.
# add all waivers individually, since exclude_files does not support globs
exclude_paths: exclude_paths:
- .cache/ # implicit unless exclude_paths is defined in config - .cache/ # implicit unless exclude_paths is defined in config
# add all waivers individually, since exclude_files does not support globs
- molecule/os_hardening/waivers.yaml - molecule/os_hardening/waivers.yaml
- molecule/ssh_hardening_bsd/waivers_freebsd13.yaml - molecule/ssh_hardening_bsd/waivers_freebsd13.yaml
- molecule/ssh_hardening_bsd/waivers_freebsd14.yaml - molecule/ssh_hardening_bsd/waivers_freebsd14.yaml
roles/os_hardening/defaults/main.yml
+1 -1
View File
@@ -146,7 +146,7 @@ sysctl_config:
# The PTRACE system is used for debugging. With it, a single user process # The PTRACE system is used for debugging. With it, a single user process
# can attach to any other dumpable process owned by the same user. In the # can attach to any other dumpable process owned by the same user. In the
# case of malicious software, it is possible to use PTRACE to access # case of malicious software, it is possible to use PTRACE to access
# credentials that exist in memory (re-using existing SSH connections, # credentials that exist in memory (reusing existing SSH connections,
# extracting GPG agent information, etc). # extracting GPG agent information, etc).
# #
# A PTRACE scope of "0" is the more permissive mode. A scope of "1" limits # A PTRACE scope of "0" is the more permissive mode. A scope of "1" limits