openstack/ansible-hardening
Code Issues Proposed changes

[Docs] Docs for TFTP server removal

Browse Source 
The tasks for this STIG are in an earlier patch, but the docs were
missing. This patch adds docs for TFTP server removal.

Implements: blueprint security-rhel7-stig
Change-Id: I13f8e29d417328131c3a25dbf150950b23258225
This commit is contained in:
Major Hayden 2016-12-06 15:45:37 -06:00
parent c9aaf90400
commit e841a78beb
1 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
doc/metadata/rhel7/RHEL-07-040490.rst
View File

@ -1,7 +1,14 @@
---
id: RHEL-07-040490
status: not implemented
tag: misc
status: implemented
tag: packages
---
This STIG requirement is not yet implemented.
If a TFTP server package is installed (``tftpd`` on Ubuntu and ``tftp-server``
on CentOS and Red Hat Enterprise Linux), the package is removed.
Deployers can opt out of this change by setting the following Ansible variable:
.. code-block:: yaml
security_rhel7_remove_tftp_server: no