Added sysctl

jamtur01 · Jul 25, 2010 · c4ad3df · c4ad3df
1 parent 189066b
commit c4ad3df
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 12 deletions.
diff --git a/files/sysctl.conf b/files/sysctl.conf
@@ -0,0 +1,11 @@
+net.ipv4.conf.default.secure_redirects = 0 
+net.ipv4.conf.all.secure_redirects = 0 
+net.ipv4.icmp_echo_ignore_broadcasts = 1 
+net.ipv4.conf.all.accept_redirects = 0 
+net.ipv4.conf.default.accept_redirects = 0 
+net.ipv4.tcp_syncookies = 1 
+net.ipv4.tcp_max_syn_backlog = 4096
+net.ipv4.conf.all.rp_filter = 1 
+net.ipv4.conf.default.rp_filter = 1 
+net.ipv4.conf.all.accept_source_route = 0 
+net.ipv4.conf.default.accept_source_route = 0 
diff --git a/manifests/sysctl.pp b/manifests/sysctl.pp
@@ -4,18 +4,7 @@
     group => 'root',
     owner => 'root',
     mode => 0600,
+    source => 'puppet:///hardening/sysctl.conf',
   }
 
-net.ipv4.conf.default.secure_redirects = 0
-net.ipv4.conf.all.secure_redirects = 0
-net.ipv4.icmp_echo_ignore_broadcasts = 1
-net.ipv4.conf.all.accept_redirects = 0
-net.ipv4.conf.default.accept_redirects = 0
-net.ipv4.tcp_syncookies = 1
-net.ipv4.tcp_max_syn_backlog = 4096
-net.ipv4.conf.all.rp_filter = 1
-net.ipv4.conf.default.rp_filter = 1
-net.ipv4.conf.all.accept_source_route = 0
-net.ipv4.conf.default.accept_source_route = 0
-
 }