fix(cis): remove deprecated sshd options and update hardening values

2026-02-20 20:17:52 +01:00
parent a2993212ca
commit 524356cf8d
6 changed files with 9 additions and 4 deletions
--- a/roles/cis/tasks/auth.yml
+++ b/roles/cis/tasks/auth.yml
@@ -5,6 +5,7 @@
    regexp: "^(\\s*)umask\\s+\\d+"
    line: "umask 027"

+# Non-RHEL/non-Debian distros: loop evaluates to [] (intentional skip)
 - name: Prevent Login to Accounts With Empty Password
  ansible.builtin.replace:
    dest: "{{ item }}"