Skip to content

Commit

Permalink
update os-hardening readme with os_ignore_users
Browse files Browse the repository at this point in the history
fixes dev-sec#542

Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
  • Loading branch information
Sebastian Gumprich committed May 30, 2022
1 parent 7c658b4 commit a8504ca
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions roles/os_hardening/README.md
Expand Up @@ -223,6 +223,9 @@ We know that this is the case on Raspberry Pi.
- `proc_mnt_options`
- Default: `rw,nosuid,nodev,noexec,relatime,hidepid={{ hidepid_option }}`
- Description: Mount proc with hardenized options, including `hidepid` with variable value.
- `os_ignore_users`
- Default: `['vagrant', 'kitchen']`
- Description: Specify system accounts whose login should not be disabled and password not changed
- `os_ignore_home_folder_users`
- Default: `lost+found`
- Description: specify user home folders in `/home` that shouldn't be chmodded to 700
Expand Down

0 comments on commit a8504ca

Please sign in to comment.