add more sysctl settings, allow overwriting

tasks/rhosts.yml

@@ -7,7 +7,7 @@
 
 - name: delete rhosts-files from system | DTAG SEC Req 3.21-4
   file: dest='~{{ item }}/.rhosts' state=absent
-  with_items: '{{ users.stdout_lines | default(omit) }}'
+  with_items: '{{ users.stdout_lines | default() }}'
 
 - name: delete hosts.equiv from system | DTAG SEC Req 3.21-4
   file: dest='/etc/hosts.equiv' state=absent

tasks/suid_sgid.yml

@@ -20,5 +20,5 @@
 - name: remove suid/sgid bit from all binaries except in system and user whitelist
   file: path='{{item}}' mode='a-s' state=file follow=yes
   with_items:
-    - '{{ suid | default(omit) | difference(os_security_suid_sgid_whitelist) }}'
+    - '{{ suid | default() | difference(os_security_suid_sgid_whitelist) }}'
   when: os_security_suid_sgid_remove_from_unknown

tasks/sysctl.yml

@@ -21,7 +21,7 @@
 
 - name: create a combined sysctl-dict if overwrites are defined
   set_fact: sysctl_config="{{ sysctl_config | combine(sysctl_overwrite) }}"
-  when: sysctl_overwrite | default(omit)
+  when: sysctl_overwrite | default()
 
 - name: Change various sysctl-settings, look at the sysctl-vars file for documentation
   sysctl:

tasks/user_accounts.yml

@@ -32,4 +32,4 @@
 - name: change system accounts not on the user provided ignore-list
   user: name='{{item}}' shell='{{os_nologin_shell_path}}' password='*'
   with_items:
-    - '{{sys_accs_cond | default(omit) | difference(os_ignore_users) | list }}'
+    - '{{sys_accs_cond | default() | difference(os_ignore_users) | list }}'