ansible-hardening/releasenotes/notes/enable-tcp-syncookes-boolean-4a884a66a3a0e4d7.yaml
Major Hayden 43c81ebcb1 Adjust TCP syncookes variable to bool
This patch changes the TCP syncookies variable to a boolean
rather than an integer to reduce confusion. It is still enabled
by default and the variable's name has changed:

  From: security_sysctl_tcp_syncookies
  To:   security_sysctl_enable_tcp_syncookies

Change-Id: I0120683963c968cf83d38e4df55f2094f74425fb
2016-08-09 08:29:31 -05:00

12 lines
378 B
YAML

---
upgrade:
- |
The variable ``security_sysctl_enable_tcp_syncookies`` has replaced
``security_sysctl_tcp_syncookies`` and it is now a boolean instead of an
integer. It is still enabled by default, but deployers can disable TCP
syncookies by setting the following Ansible variable:
.. code-block:: yaml
security_sysctl_enable_tcp_syncookies: no