From efbc78edf4b93ec9628764ac8a008ac913bfb88b Mon Sep 17 00:00:00 2001 From: root Date: Fri, 27 Nov 2020 21:32:42 -0500 Subject: [PATCH] 2-common/tasks/main.yml sysctl settings: summarize evolving OS norms --- roles/2-common/tasks/main.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/2-common/tasks/main.yml b/roles/2-common/tasks/main.yml index ab6f774fe..88c48203e 100644 --- a/roles/2-common/tasks/main.yml +++ b/roles/2-common/tasks/main.yml @@ -30,9 +30,9 @@ - { name: 'net.ipv4.ip_forward', value: '1' } - { name: 'net.ipv4.conf.default.rp_filter', value: '1' } - { name: 'net.ipv4.conf.default.accept_source_route', value: '0' } - #- { name: 'kernel.sysrq', value: '1' } # Already set by most Linux OS's + #- { name: 'kernel.sysrq', value: '1' } # OS values differ, Ok? - { name: 'kernel.core_uses_pid', value: '1' } - #- { name: 'net.ipv4.tcp_syncookies', value: '1' } # Should be set by OS + #- { name: 'net.ipv4.tcp_syncookies', value: '1' } # Very standard in 2020 #- { name: 'kernel.shmmax', value: '268435456' } # OS values differ, Ok? - { name: 'net.ipv6.conf.all.disable_ipv6', value: '1' } # IPv6 disabled #- { name: 'net.ipv6.conf.default.disable_ipv6', value: '1' } # AUTO-SET