This ansible-hardening role applies security hardening configurations from the Center for Internet Security Guide (CIS), it provides important security-related configurations to systems running the following distributions:
- Red Hat Enterprise
- Ubuntu 16.04
For more details, review the ansible-hardening documentation.
Add your hosts to /hosts file, uncomment the roles that you want to run in /main.yml file, then run the following command:
ansible-playbook -i hosts main.yml
Customize the checklist file located in the root directory to chose the configurations to apply. Example:
network:
# IPV4
disable_ip_forwarding: yes
disable_packet_redirect: no
This role can be used with or without OpenStack-Ansible. It requires Ansible 2.3 or later.
BITAM Salim github.com/soolidsnake.
MALAOUI Sidahmed bilal github.com/sidahmed-malaoui.
GNU General Public License v3.0