openstack/ansible-hardening
Code Issues Proposed changes

Restore security_ntp_servers variable default

Browse Source 
The security_ntp_servers variable was accidentally removed with
the RHEL 6 STIG removal and this patch puts it back.

Closes-Bug: 1716703
Change-Id: I2cce0d5a2f9ede5f54829a6de6824a1567214c0c
This commit is contained in:
Major Hayden 2017-09-12 09:42:24 -06:00
parent 9a403734b8
commit 8dee735213
No known key found for this signature in database
GPG Key ID: 737051E0C1011FB1
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
defaults/main.yml
View File

@ -260,6 +260,12 @@ security_grub_password_hash: grub.pbkdf2.sha512.10000.7B21785BEAFEE3AC71459D8210
security_rhel7_session_timeout: 600 # V-72223 security_rhel7_session_timeout: 600 # V-72223
# Enable chrony for NTP time synchronization. # Enable chrony for NTP time synchronization.
security_rhel7_enable_chrony: yes # V-72269 security_rhel7_enable_chrony: yes # V-72269
# Use the following NTP servers.
security_ntp_servers:
- 0.north-america.pool.ntp.org
- 1.north-america.pool.ntp.org
- 2.north-america.pool.ntp.org
- 3.north-america.pool.ntp.org
# Restrict mail relaying. # Restrict mail relaying.
security_rhel7_restrict_mail_relaying: yes # V-72297 security_rhel7_restrict_mail_relaying: yes # V-72297
# Deploy a login banner. # V-72225 / V-71863 # Deploy a login banner. # V-72225 / V-71863