22 lines
502 B
YAML
22 lines
502 B
YAML
---
|
|
- block:
|
|
- name: Set kernel hardening parameters
|
|
template:
|
|
src: etc/sysctl.d/local.conf.j2
|
|
dest: /etc/sysctl.d/local.conf
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
notify: __kernel_reload
|
|
|
|
- name: Deploy custom modprobe
|
|
template:
|
|
src: etc/modprobe.d/custom.conf.j2
|
|
dest: /etc/modprobe.d/custom.conf
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
notify: __kernel_reload
|
|
become: True
|
|
become_user: root
|