openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/source/developer-notes/V-38517.rst
Major Hayden 3120484527 V-3851{4,5,6,7}: Disabling certain network protocols 
This also includes a minor cleanup for V-38490 (disable usb-storage module).

Change-Id: Ie874cbf3c8fb6a69b7d0d674d728876a5d4d1fb7
2015-10-14 13:43:39 +00:00

481 B
Raw Blame History

The Transparent Inter-Process Communication (TIPC) protocol must be disabled. Neither Ubuntu 14.04 or openstack-ansible enables this module by default, so the Ansible tasks in this role will disable the module.

To opt-out of this change, set the following variable to no:

disable_module['tipc']: no

NOTE: The module will be disabled on the next reboot.