openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/source/developer-notes/V-38660.rst
Major Hayden 9e5866c50b V-38660: SNMPv3 
Implements: blueprint security-hardening

Change-Id: Ib53acd93061db7d29422e50c0400efe92edb7d96
2015-10-27 11:04:32 -05:00

730 B
Raw Blame History

Although neither Ubuntu 14.04 or openstack-ansible install or configure the SNMP daemon by default, the Ansible tasks will check to see if the SNMP configuration file is present. If the file is present, and the file contains configurations for insecure SNMP protocols, an error will be printed and the playbook will fail.

The task specifically looks for uncommented configuration lines containing:

  • v1
  • v2c
  • com2sec
  • community

Red Hat's guide to SNMP has some example configurations that deployers can use to enable SNMPv3.