ansible-hardening/releasenotes/notes/disable-check-of-package-checksums-by-default-3543840512c348d6.yaml
Christian Berendt baa5db7768 Make check of package checksums configurable
Change-Id: I9ac64d7995223a20b956d0a1b83bd1a60e556c03
2017-11-02 09:01:35 +01:00

8 lines
337 B
YAML

---
features:
- |
Generating and validating checksums for all files installed by packages is now
disabled by default. The check causes delays in playbook runs and it can
consume a significant amount of CPU and I/O resources. Deployers can re-enable
the check by setting ``security_check_package_checksums`` to ``yes``.