openstack/ansible-hardening
Code Issues Proposed changes

Add new parameter 'security_ntp_bind_local_interfaces_only'

Browse Source 
With the parameter 'security_ntp_bind_local_interfaces_only' it is possible
to configure if chronyd should listen on all available network interfaces for
NTP requests.

Change-Id: I7e56d60df7c7214e753d1ca86aceed05849addef
This commit is contained in:
Christian Berendt
2016-05-19 13:51:40 +02:00
committed by Christian Berendt
parent 8a3a83acaa
commit 3114703ebb
4 changed files with 23 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@@ -138,6 +138,8 @@ security_allowed_ntp_subnets:
- 10/8
- 192.168/16
- 172.16/12
# Listen for NTP requests only on local interfaces.
security_ntp_bind_local_interfaces_only: yes
## Core dumps
# V-38675 requires disabling core dumps for all users unless absolutely