openstack/ansible-hardening
Code Issues Proposed changes
24f3f73717
ansible-hardening/doc/source/developer-notes/V-38672.rst
Major Hayden 3107e7cc9d
Disable the netconsole service (if present) 
This patch checks for the netconsole service on a host and disables the
service, if the service is installed. The service will be stopped
immediately if it is found to be running.

Documentation and release notes are included.

Closes-bug: 1584194

Change-Id: If779af67c2a66e7b56d170f1f12744aef75ff27b
2016-05-20 15:41:13 -05:00

344 B
Raw Blame History

Ubuntu doesn't provide the netconsole package and the daemon isn't included in any other Ubuntu packages.

In CentOS, the netconsole daemon will be stopped and disabled if it is found to be installed. Deployers can opt-out of this change by setting the following Ansible variable:

security_disable_netconsole: no