From 6da9143c39832f1ed94020581e184d29ac2db7e3 Mon Sep 17 00:00:00 2001 From: ComplianceAsCode development team Date: Wed, 12 Feb 2020 10:51:49 -0700 Subject: [PATCH] Updates defaults/main.yml --- defaults/main.yml | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/defaults/main.yml b/defaults/main.yml index be65a51..27cde2b 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -1,22 +1,22 @@ --- # defaults file for rhel8_rht_ccp -var_system_crypto_policy: FIPS -var_selinux_state: enforcing var_selinux_policy_name: targeted -var_password_pam_dcredit: '-1' +var_selinux_state: enforcing +var_system_crypto_policy: FIPS +var_accounts_minimum_age_login_defs: '7' +var_accounts_password_minlen_login_defs: '6' +var_accounts_password_warn_age_login_defs: '7' +var_password_pam_unix_remember: '5' +var_accounts_passwords_pam_faillock_deny: '5' +var_password_pam_ucredit: '-2' var_password_pam_lcredit: '-2' -var_password_pam_ocredit: '-2' +var_password_pam_dcredit: '-1' var_password_pam_difok: '3' +var_password_pam_ocredit: '-2' var_password_pam_retry: '3' -var_password_pam_ucredit: '-2' -var_accounts_passwords_pam_faillock_deny: '5' -var_password_pam_unix_remember: '5' -var_accounts_password_minlen_login_defs: '6' -var_accounts_password_warn_age_login_defs: '7' -var_accounts_minimum_age_login_defs: '7' +var_sshd_set_keepalive: '0' sshd_listening_port: '22' sshd_idle_timeout_value: '300' -var_sshd_set_keepalive: '0' accounts_minimum_age_login_defs: true accounts_password_minlen_login_defs: true accounts_password_pam_dcredit: true