PHiAX/Raspberry-Pi-IaC
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add whitelist for squashfs filesystem

Browse source
This commit is contained in:
Thomas Kleinendorst 2024-04-12 12:21:45 +02:00
parent c7a20e14a1
commit 64fa1562dd
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
playbook.yml
View file

@ -20,6 +20,8 @@
# devsec.hardening.os_hardening vars:
os_auth_pw_max_age: 99999 # Effectively disables the setting as mentioned in the docs.
os_cron_enabled: false # Cron isn't needed for the installation.
os_filesystem_whitelist:
- squashfs # Used by Snapcraft which is installed on the Raspberry Pi at some moment
sysctl_overwrite:
vm.mmap_rnd_bits: 16 # See the "sysctl - vm.mmap_rnd_bits" section of the docs.
# devsec.hardening.ssh_hardening vars: