20 lines
388 B
YAML
20 lines
388 B
YAML
---
|
|
# CIS-Specific Variables for System Hardening
|
|
|
|
# AppArmor (CIS 1.3.x)
|
|
apparmor_enabled: true
|
|
apparmor_enforce_all: true
|
|
|
|
# Auditd (CIS 4.1.x)
|
|
auditd_enabled: true
|
|
auditd_max_log_file: 8 # MB
|
|
|
|
# Network (CIS 3.x)
|
|
disable_ipv6: true # Set to false if IPv6 is needed
|
|
|
|
# Core dumps (CIS 1.5.1)
|
|
disable_core_dumps: true
|
|
|
|
# Uncommon protocols (CIS 3.3.x)
|
|
disable_uncommon_protocols: true
|