ansible-hardening/V-38490.rst at 24f3f73717bf845f7993c32e39b3e20f4392e8f2

Switch from dict to individual variables

The dictionary-based variables didn't work properly and this patch
changes them to individual variables. If users followed the existing
documentation, their environments will be unaffected by this change
(they are still broken).

The new variables follow the pattern `security_VARIABLENAME` which
will soon become the standard for the role to avoid variable name
collisions with other playbooks and roles.

Release notes are included with this patch.

Closes-bug: 1577944

Change-Id: I455f66a0b4f423e2cf0e753b129367427f29479f

2016-05-05 08:32:38 -05:00

330 B

Raw Blame History

Exception

Disabling the usb-storage module can add extra security, but it's not necessary on most systems. To disable the usb-storage module on hosts, set the following variable to yes:

security_disable_module_usb_storage: yes

NOTE: The module will be disabled on the next reboot.

330 B Raw Blame History

330 B

Raw Blame History