2019-11-03 23:22:18 +00:00
|
|
|
---
|
2024-02-18 12:46:52 +00:00
|
|
|
- name: Set default kernel hardening parameters
|
|
|
|
|
ansible.builtin.template:
|
|
|
|
|
src: etc/sysctl.d/99-local.conf.j2
|
|
|
|
|
dest: /etc/sysctl.d/99-local.conf
|
|
|
|
|
owner: root
|
|
|
|
|
group: root
|
|
|
|
|
mode: "0644"
|
|
|
|
|
notify: __kernel_reload
|
2019-11-03 23:22:18 +00:00
|
|
|
|
2024-02-18 12:46:52 +00:00
|
|
|
- name: Deploy custom kernel configurations
|
|
|
|
|
ansible.builtin.template:
|
|
|
|
|
src: etc/sysctl.d/xx-custom.conf.j2
|
|
|
|
|
dest: "/etc/sysctl.d/{{ item.file }}.conf"
|
|
|
|
|
owner: root
|
|
|
|
|
group: root
|
|
|
|
|
mode: "0644"
|
|
|
|
|
loop: "{{ kernel_custom_config }}"
|
|
|
|
|
loop_control:
|
|
|
|
|
label: "{{ item.file }}"
|
|
|
|
|
notify: __kernel_reload
|
2023-01-29 14:31:08 +00:00
|
|
|
|
2024-02-18 12:46:52 +00:00
|
|
|
- name: Deploy custom modprobe
|
|
|
|
|
ansible.builtin.template:
|
|
|
|
|
src: etc/modprobe.d/custom.conf.j2
|
|
|
|
|
dest: /etc/modprobe.d/custom.conf
|
|
|
|
|
owner: root
|
|
|
|
|
group: root
|
|
|
|
|
mode: "0644"
|
|
|
|
|
notify: __kernel_reload
|
