Files
Balamurali MandGitHub f90fba7c66 feat: Add playbooks for hardening servers (#236)
* feat(Hardening): Add playbooks for sshd hardening & warning banners

* feat(hardening): Enable ASLR & remove prelink

* feat(hardening): Add playbooks for PAM configuration

* feat(harden): Add playbook to setup AIDE

This will add cron job in cron.daily for ubuntu

* feat(hardening): Add playbook for auditd

Only package name seems to be different from centOS playbook

* feat(hardening): Add playbook to check gpg file

* feat: Add main playbook for hardening
2021-10-05 08:13:50 +05:30

15 lines
293 B
YAML

---
- name: Ensure address space layout randomization (ASLR) is enabled
sysctl:
name: kernel.randomize_va_space
value: '2'
state: present
reload: yes
sysctl_set: yes
ignoreerrors: yes
- name: Ensure prelink is disabled
package:
name: prelink
state: absent