openstack/ansible-hardening
Code Issues Proposed changes

Add dividers to defaults/main.yml

Browse Source 
This patch adds dividers in the defaults/main.yml to separate
configuration defaults for the RHEL 6 & 7 STIG content. The
vast majority of the configuration variables will differ between
both of these STIG versions, so it doesn't make sense to intermix
the defaults.

Implements: blueprint security-rhel7-stig
Change-Id: Ib46f9d2bba40f861b4bb22c08315d28c35e618ee
This commit is contained in:
Major Hayden 2016-10-05 14:34:38 -05:00
parent 4e7e57add2
commit b87effb2b0
1 changed files with 25 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
defaults/main.yml
View File

@ -30,10 +30,16 @@ cache_timeout: 600
# Options are 'present' and 'latest'
security_package_state: "latest"
### Default configurations for openstack-ansible-security #####################
###############################################################################
# ____ _ _ _____ _ __ ____ _____ ___ ____
# | _ \| | | | ____| | / /_ / ___|_ _|_ _/ ___|
# | |_) | |_| | _| | | | '_ \ \___ \ | | | | | _
# | _ <| _ | |___| |___ | (_) | ___) || | | | |_| |
# |_| \_\_| |_|_____|_____| \___/ |____/ |_| |___\____|
#
# All of the configuration items below are documented in the developer notes
# found here:
# The default configurations after this marker apply to the RHEL 6 STIG
# content in the openstack-ansible-security role. Review the comments below
# as well as the main openstack-ansible-security documentation:
#
# http://docs.openstack.org/developer/openstack-ansible-security/
#
@ -359,3 +365,19 @@ security_sudoers_remove_authenticate: no # V-58901
## Unattended upgrades (APT) configuration
security_unattended_upgrades_enabled: false
security_unattended_upgrades_notifications: false
###############################################################################
# ____ _ _ _____ _ _____ ____ _____ ___ ____
# | _ \| | | | ____| | |___ | / ___|_ _|_ _/ ___|
# | |_) | |_| | _| | | / / \___ \ | | | | | _
# | _ <| _ | |___| |___ / / ___) || | | | |_| |
# |_| \_\_| |_|_____|_____| /_/ |____/ |_| |___\____|
#
# UNDER ACTIVE DEVELOPMENT
#
# The default configurations after this marker apply to the RHEL 7 STIG
# content in the openstack-ansible-security role. This content is still under
# active development and will not be applied to systems by default until
# the development work is complete.
#
###############################################################################