mirror of https://github.com/easzlab/kubeasz.git
10 lines
330 B
YAML
10 lines
330 B
YAML
---
|
|
# system accounts that do not get their login disabled and pasword changed
|
|
os_always_ignore_users: ['root','sync','shutdown','halt', 'ec2-user']
|
|
|
|
sysctl_rhel_config:
|
|
# ExecShield protection against buffer overflows
|
|
kernel.exec-shield: 1
|
|
# Syncookies is used to prevent SYN-flooding attacks.
|
|
net.ipv4.tcp_syncookies: 1
|