evolix/ansible-roles
22
2
Fork 2
Code Issues 61 Pull requests 18 Releases 32 Wiki Activity

evolinux-base: compact multiple systctl tasks into one

Browse source
This commit is contained in:
Jérémy Lecour 2018-08-20 16:08:45 +02:00 committed by Jérémy Lecour
parent 5721282a9f
commit b6fa349394
1 changed files with 8 additions and 27 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

35
evolinux-base/tasks/kernel.yml
View file

@ -50,36 +50,17 @@
reload: yes
when: evolinux_kernel_cve20165696
- name: Patch for TCP stack vulnerabiliy CVE-2018-5391 (FragmentSmack)
- name: Patch for TCP stack vulnerability CVE-2018-5391 (FragmentSmack)
sysctl:
name: net.ipv4.ipfrag_low_thresh
value: 196608
sysctl_file: "{{ evolinux_kernel_sysctl_path }}"
state: present
reload: yes
- name: Patch for TCP stack vulnerabiliy CVE-2018-5391 (FragmentSmack)
sysctl:
name: net.ipv6.ip6frag_low_thresh
value: 196608
sysctl_file: "{{ evolinux_kernel_sysctl_path }}"
state: present
reload: yes
- name: Patch for TCP stack vulnerabiliy CVE-2018-5391 (FragmentSmack)
sysctl:
name: net.ipv4.ipfrag_high_thresh
value: 262144
sysctl_file: "{{ evolinux_kernel_sysctl_path }}"
state: present
reload: yes
- name: Patch for TCP stack vulnerabiliy CVE-2018-5391 (FragmentSmack)
sysctl:
name: net.ipv6.ip6frag_high_thresh
value: 262144
name: "{{ item.name }}"
value: "{{ item.value }}"
sysctl_file: "{{ evolinux_kernel_sysctl_path }}"
state: present
reload: yes
with_items:
- { name: "net.ipv4.ipfrag_low_thresh", value: 196608 }
- { name: "net.ipv6.ip6frag_low_thresh", value: 196608 }
- { name: "net.ipv4.ipfrag_high_thresh", value: 262144 }
- { name: "net.ipv6.ip6frag_high_thresh", value: 262144 }
- meta: flush_handlers