openstack-ansible-security/templates
Shannon Mitchell e7dc4eec61 Enable ntp client functionality with chronyd
Using 'bindaddress' in the /etc/chrony/chrony.conf disables both
client and server ntp functionality as it cannot get the ntp
responses from peer servers.  The default install will leave the
servers unsynced with an ntp source causing them to skew over
time and eventually break services that rely on synced time.
Setting 'port 0' will disable the server functionality.  Using
'bindcmdaddress' will still chronc<->chronyd communictions over
localhost only.  This should allow client functionality and
disable server functionality.

Change-Id: Ie9b6e73333d9469a17e4cee06f21aa99b2b3df7e
Closes-Bug: #1656086
(cherry picked from commit 4cb2fa4eaa)
2017-03-10 11:59:44 +00:00
..
ZZ_aide_exclusions.j2 Use ansible_managed variable in templates 2016-05-19 13:57:16 +02:00
chrony.conf.j2 Enable ntp client functionality with chronyd 2017-03-10 11:59:44 +00:00
dconf-gdm-banner-message.j2 Enable graphical login banner 2016-11-18 13:48:43 -06:00
dconf-screensaver-lock.j2 Set graphical session locks 2016-11-14 08:15:49 -06:00
dconf-session-user-config-lockout.j2 Set graphical session locks 2016-11-14 08:15:49 -06:00
jail.local.j2 Use ansible_managed variable in templates 2016-05-19 13:57:16 +02:00
osas-auditd-rhel7.j2 Unblock security role gate 2017-01-03 12:19:46 -06:00
osas-auditd.j2 Unblock security role gate 2017-01-03 12:19:46 -06:00
pam_faillock.j2 Apply pam_faillock restrictions [+Docs] 2016-12-05 08:47:59 +00:00
pwquality.conf.j2 Set minimum password length [+Docs] 2016-12-02 19:57:14 +00:00
sshd_config_block.j2 Configure sshd based on the RHEL 7 STIG 2016-11-09 17:44:08 +00:00