boxswapper/stoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

installed firewalld and selinux permissions

Browse Source
This commit is contained in:
boxswapper
2026-09-13 13:33:53 -06:00
parent cce172b9fe
commit bfcdc47e46
5 changed files with 76 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
group_vars/all/vars.yml
View File

@@ -67,6 +67,14 @@ sshd_password_authentication: yes
# out. Leave false unless you know what you are doing.
sshd_mfa_required: false
# ------------------------------------------------------------
# Hardening - SELinux
# ------------------------------------------------------------
# Native Fedora 44 ships SELinux enforcing; the role keeps it in
# this mode and installs container-selinux + policycoreutils
# (semanage / audit2why) for diagnosing container denials.
selinux_mode: enforcing
# ------------------------------------------------------------
# Hardening - firewall (firewalld, default deny)
# ------------------------------------------------------------