WoodSmellParticle/ansible-infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat!: disable facts injection for security purpose

Browse source
This commit is contained in:
NaeiKinDus 2023-12-10 00:00:00 +00:00
parent b33a29d0d9
commit 0829d7807f
Signed by: WoodSmellParticle
GPG key ID: 8E52ADFF7CA8AE56
9 changed files with 36 additions and 34 deletions
Download patch file Download diff file Expand all files Collapse all files

4
collections/ansible_collections/nullified/infrastructure/roles/security/tasks/main.yml
View file

@ -168,11 +168,11 @@
block:
- name: '[system] login.defs'
ansible.builtin.template:
src: '../templates/system/{{ ansible_distribution | lower }}/login.defs.j2'
src: '../templates/system/{{ ansible_facts["distribution"] | lower }}/login.defs.j2'
dest: /etc/login.defs
mode: '0644'
- name: '[system] limits.conf'
ansible.builtin.template:
src: '../templates/system/{{ ansible_distribution | lower }}/limits.conf.j2'
src: '../templates/system/{{ ansible_facts["distribution"] | lower }}/limits.conf.j2'
dest: /etc/security/limits.conf
mode: '0644'