Ansible/BasicServerHardening
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

FIX: prevent bpf hardening on kernels < 5.8

Browse Source
This commit is contained in:
Dominik Meyer 2022-03-22 23:16:42 +01:00
parent 310e52b330
commit 259aa1ed7b
No known key found for this signature in database
GPG Key ID: B4C312B600606B64
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tasks/main.yml
View File

@ -405,7 +405,7 @@
name: kernel.unprivileged_bpf_disabled name: kernel.unprivileged_bpf_disabled
value: '1' value: '1'
state: present state: present
when: BasicHardeningEnable and (ansible_facts.distribution_release == "bullseye" or ansible_facts.distribution_release == "buster") when: BasicHardeningEnable and ansible_kernel is version_compare('5.8','>=')
- name: harden den bpf jit compilter - name: harden den bpf jit compilter
@ -413,4 +413,4 @@
name: net.core.bpf_jit_harden name: net.core.bpf_jit_harden
value: '2' value: '2'
state: present state: present
when: BasicHardeningEnable and ansible_facts.distribution_release == "bullseye" when: BasicHardeningEnable and ansible_kernel is version_compare('5.8','>=')