Produced by Araxis Merge on 5/14/2018 1:18:38 PM Eastern Daylight Time. See www.araxis.com for information about Merge. This report uses XHTML and CSS2, and is best viewed with a modern standards-compliant browser. For optimum results when printing this report, use landscape orientation and enable printing of background images and colours in your browser.
| # | Location | File | Last Modified |
|---|---|---|---|
| 1 | MCCF_EDI_TAS_Infrastructure.zip\MCCF_EDI_TAS_Infrastructure\mag_sys_build\playbooks | grub_settings.yml | Tue Mar 27 23:51:06 2018 UTC |
| 2 | MCCF_EDI_TAS_Infrastructure.zip\MCCF_EDI_TAS_Infrastructure\mag_sys_build\playbooks | grub_settings.yml | Tue May 8 03:18:51 2018 UTC |
| Description | Between Files 1 and 2 |
|
|---|---|---|
| Text Blocks | Lines | |
| Unchanged | 2 | 94 |
| Changed | 1 | 2 |
| Inserted | 0 | 0 |
| Removed | 0 | 0 |
| Whitespace | |
|---|---|
| Character case | Differences in character case are significant |
| Line endings | Differences in line endings (CR and LF characters) are ignored |
| CR/LF characters | Not shown in the comparison detail |
No regular expressions were active.
| 1 | # Ansible Playbook | |
| 2 | # Erik van Oudheusde n PII - 28 Sep 2 017 | |
| 3 | # | |
| 4 | # Enable A uditing fo r Processe s Which St art Prior to the Aud it Daemon and Disabl e Kernel S upport for USB via B ootloader Configurat ion | |
| 5 | ||
| 6 | --- | |
| 7 | - name: Mo dify Grub | |
| 8 | hosts: r hel7 | |
| 9 | become: yes | |
| 10 | tasks: | |
| 11 | - name: Setup NIST FIPS | |
| 12 | linein file: | |
| 13 | stat e: present | |
| 14 | dest : /etc/def ault/grub | |
| 15 | back up: yes | |
| 16 | back refs: yes | |
| 17 | rege xp: '^(GRU B_CMDLINE_ LINUX=(?!. *fips)\"[^ \"]+)(\".* )' | |
| 18 | line : '\1 fips =1 boot=/d ev/sda1\2' | |
| 19 | - name: Setup audi t | |
| 20 | linein file: | |
| 21 | stat e: present | |
| 22 | dest : /etc/def ault/grub | |
| 23 | back up: yes | |
| 24 | back refs: yes | |
| 25 | rege xp: '^(GRU B_CMDLINE_ LINUX=(?!. *audit)\"[ ^\"]+)(\". *)' | |
| 26 | line : '\1 audi t=1\2' | |
| 27 | - name: Disable ip v6 | |
| 28 | linein file: | |
| 29 | stat e: present | |
| 30 | dest : /etc/def ault/grub | |
| 31 | back up: yes | |
| 32 | back refs: yes | |
| 33 | rege xp: '^(GRU B_CMDLINE_ LINUX=(?!. *ipv6)\"[^ \"]+)(\".* )' | |
| 34 | line : '\1 ipv6 .disable=1 \2' | |
| 35 | - name: Disable US B | |
| 36 | linein file: | |
| 37 | stat e: present | |
| 38 | dest : /etc/def ault/grub | |
| 39 | back refs: yes | |
| 40 | rege xp: '^(GRU B_CMDLINE_ LINUX=(?!. *nousb)\"[ ^\"]+)(\". *)' | |
| 41 | line : '\1 nous b=1\2' | |
| 42 | - name: Rebuild GR UB | |
| 43 | comman d: /usr/sb in/grub2-m kconfig -o /boot/gru b2/grub.cf g | |
| 44 | - name: Configure Running Ke rnel | |
| 45 | comman d: /sbin/g rubby --up date-kerne l=ALL --ar gs="fips=1 boot=/dev /sda1" --a rgs="audit =1" --args ="noipv6" --args="no usb" | |
| 46 | ||
| 47 | ||
| 48 |
Araxis Merge (but not the data content of this report) is Copyright © 1993-2016 Araxis Ltd (www.araxis.com). All rights reserved.