diff --git a/evolinux-base/defaults/main.yml b/evolinux-base/defaults/main.yml index 26428674..71a980e4 100644 --- a/evolinux-base/defaults/main.yml +++ b/evolinux-base/defaults/main.yml @@ -81,6 +81,11 @@ evolinux_system_timezone: "Europe/Paris" evolinux_system_vim_default: True evolinux_system_profile: True evolinux_system_dirmode_adduser: True +evolinux_system_restrict_securetty: False +evolinux_system_set_timeout: True +evolinux_system_cron_verboselog: True +evolinux_system_cron_umask: True +evolinux_system_cron_random: True evolinux_system_alert5_init: True evolinux_system_alert5_enable: True evolinux_system_eni_auto: True diff --git a/evolinux-base/tasks/system.yml b/evolinux-base/tasks/system.yml index cd7eaaad..78dc09f7 100644 --- a/evolinux-base/tasks/system.yml +++ b/evolinux-base/tasks/system.yml @@ -72,7 +72,7 @@ line: "tty2" create: yes state: present - when: evolinux_system_dirmode_adduser + when: evolinux_system_restrict_securetty - name: Setting TMOUT to deconnect inactive users lineinfile: @@ -80,17 +80,25 @@ line: "export TMOUT=36000" create: yes state: present - when: evolinux_system_dirmode_adduser + when: evolinux_system_set_timeout #- name: Customizing /etc/fstab +- name: Set verbose logging for cron deamon + lineinfile: + dest: /etc/default/cron + line: "EXTRA_OPTS='-L 15'" + create: yes + state: present + when: evolinux_system_cron_verboselog + - name: Modify default umask for cron deamon lineinfile: dest: /etc/default/cron line: "umask 022" create: yes state: present - when: evolinux_system_dirmode_adduser + when: evolinux_system_cron_umask - name: Randomize periodic crontabs replace: @@ -103,7 +111,7 @@ - {regexp: '^25\s*6((\s*\*){3})', replace: '{{ 59|random(start=1) }} {{ [0,1,3,4,5,6,7]|random }}\1', backup: "no"} - {regexp: '^47\s*6((\s*\*){2}\s*7)', replace: '{{ 59|random(start=1) }} {{ [0,1,3,4,5,6,7]|random }}\1', backup: "no"} - {regexp: '^52\s*6(\s*1(\s*\*){2})', replace: '{{ 59|random(start=1) }} {{ [0,1,3,4,5,6,7]|random }}\1', backup: "no"} - when: evolinux_system_dirmode_adduser + when: evolinux_system_cron_random # NTP server address