mirror of
https://github.com/hanzo-io/cloud.git
synced 2026-10-30 18:57:42 +00:00
* feat(Hardening): Add playbooks for sshd hardening & warning banners * feat(hardening): Enable ASLR & remove prelink * feat(hardening): Add playbooks for PAM configuration * feat(harden): Add playbook to setup AIDE This will add cron job in cron.daily for ubuntu * feat(hardening): Add playbook for auditd Only package name seems to be different from centOS playbook * feat(hardening): Add playbook to check gpg file * feat: Add main playbook for hardening
15 lines
293 B
YAML
15 lines
293 B
YAML
---
|
|
- name: Ensure address space layout randomization (ASLR) is enabled
|
|
sysctl:
|
|
name: kernel.randomize_va_space
|
|
value: '2'
|
|
state: present
|
|
reload: yes
|
|
sysctl_set: yes
|
|
ignoreerrors: yes
|
|
|
|
- name: Ensure prelink is disabled
|
|
package:
|
|
name: prelink
|
|
state: absent
|