openstack/ansible-hardening
Code Issues Proposed changes

Use ansible_managed variable in templates

Browse Source 
Change-Id: I7cb7ee0885c26bc4b9196ca44fe5dc318b9ef739
This commit is contained in:
Christian Berendt 2016-05-19 13:57:16 +02:00
parent 8a3a83acaa
commit 750260d3bd
4 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
templates/ZZ_aide_exclusions.j2
View File

@ -1,4 +1,5 @@
# This file was deployed by openstack-ansible-security. # {{ ansible_managed }}
#
# These excluded paths prevent AIDE from wandering into directories where it # These excluded paths prevent AIDE from wandering into directories where it
# shouldn't be hashing/monitoring files. # shouldn't be hashing/monitoring files.

2
templates/chrony.conf.j2
View File

@ -1,3 +1,5 @@
# {{ ansible_managed }}
#
# This the default chrony.conf file for the Debian chrony package. After # This the default chrony.conf file for the Debian chrony package. After
# editing this file use the command 'invoke-rc.d chrony restart' to make # editing this file use the command 'invoke-rc.d chrony restart' to make
# your changes take effect. John Hasler <jhasler@debian.org> 1998-2008 # your changes take effect. John Hasler <jhasler@debian.org> 1998-2008

4
templates/jail.local.j2
View File

@ -1,4 +1,6 @@
# File added by openstack-ansible-security for RHEL 6 STIG V-38501 # {{ ansible_managed }}
#
# added for RHEL 6 STIG V-38501
[DEFAULT] [DEFAULT]
# "bantime" is the number of seconds that a host is banned. # "bantime" is the number of seconds that a host is banned.

2
templates/osas-auditd.j2
View File

@ -1,3 +1,5 @@
# {{ ansible_managed }}
{% if security_audit_clock_settimeofday | bool %} {% if security_audit_clock_settimeofday | bool %}
# RHEL 6 STIG V-38522 # RHEL 6 STIG V-38522
# Audits changes to system time via settimeofday # Audits changes to system time via settimeofday