fa2800419e
This patch migrates all of the remaining non-unique variable names in the security role to a pattern that begins with `security_*`. This will reduce potential variable collisions with other roles. This is a breaking change for deployers and users who are moving from the liberty or stable/mitaka branches to master. Release notes are included with additional details to help with the transition. Closes-Bug: 1578326 Change-Id: Ib716e81e6fed971b21dc5579ae1a871736e21189
15 lines
437 B
ReStructuredText
15 lines
437 B
ReStructuredText
**Opt-in required**
|
|
|
|
The STIG requires IPv6 to be disabled system-wide unless it is needed for the
|
|
system to operate. Deployers must consider how their network is configured
|
|
before disabling IPv6 entirely.
|
|
|
|
To opt-in for this change, set the following Ansible variable to ``yes``:
|
|
|
|
.. code-block:: yaml
|
|
|
|
security_disable_ipv6: yes
|
|
|
|
**NOTE:** This change will go into effect **immediately** on the system and
|
|
persist through reboots.
|