Merge pull request #19 from danielkubat/limits

Use pam_limits module to set limits

ansible/playbooks/tasks/harden.yml

@@ -20,14 +20,14 @@
         - harden
         - kernel
 
-    - name: security limits
+    - name: Security limits
-      copy:
+      pam_limits:
         dest: "/etc/security/limits.d/cis.conf"
-        owner: root
+        domain: "{{ item.domain }}"
-        group: root
+        limit_type: "{{ item.limit_type }}"
-        mode: '0644'
+        limit_item: "{{ item.limit_item }}"
-        content: |
+        value: "{{ item.value }}"
-          * hard core 0
+      with_items: "{{ limits }}"
       tags:
         - harden
 

ansible/playbooks/vars/RedHat.yml

@@ -17,6 +17,10 @@ remove_packages:
   - rsh
   - lftp
 
+# security limits
+limits:
+  - { domain: '*', limit_type: hard, limit_item: core, value: 0 }
+
 # sysctl settings
 sysctl_config:
   net.ipv4.ip_forward: 0