26 lines
865 B
YAML
26 lines
865 B
YAML
---
|
|
# ---------------------------------------------------
|
|
# configuration Linux : Sécurisation
|
|
# ---------------------------------------------------
|
|
- name: Ajout du soft reboot
|
|
ansible.builtin.lineinfile: dest=/etc/rc.local state=present line='/sbin/ctrlaltdel soft'
|
|
tags: softreboot
|
|
|
|
- name: Sécurisation du vidage mémoire
|
|
ansible.builtin.copy: src="00-vidage.conf" dest="/etc/security/limits.d/00-vidage.conf"
|
|
|
|
- name: Application des paramètres de configuration sécurisée
|
|
ansible.builtin.sysctl:
|
|
name={{ item.name }}
|
|
value={{ item.value }}
|
|
state=present
|
|
reload=yes
|
|
ignoreerrors=yes
|
|
ignoreerrors=yes
|
|
sysctl_set=yes
|
|
sysctl_file=/etc/sysctl.d/97-secure-configuration.conf
|
|
when: secure_configuration
|
|
loop: "{{ linux_secure_config }}"
|
|
tags: secure_config
|
|
|