Issues #28 addressed thansk to @msachikanta

Signed-off-by: Mark Bolwell <[email protected]>
ansible-lockdown · Jun 4, 2024 · fee167b · fee167b
1 parent 15511b3
commit fee167b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/defaults/main.yml b/defaults/main.yml
@@ -411,7 +411,7 @@ amazon2cis_ssh_loglevel: INFO
 # To conform to CIS standards this value nees to be 10 or less
 amazon2cis_ssh_maxsessions: 10
 amazon2cis_sshd:
-    # clientalivecountmax: 0
+    clientalivecountmax: 0
     # clientaliveinterval shoudl be between 1 and 900
     clientaliveinterval: 300
     ciphers: "[email protected],[email protected],[email protected],aes256-ctr,aes192-ctr,aes128-ctr"

diff --git a/tasks/section_5/cis_5.3.x.yml b/tasks/section_5/cis_5.3.x.yml
@@ -297,7 +297,7 @@
         lineinfile:
             path: /etc/ssh/sshd_config
             regexp: '^ClientAliveCountMax'
-            line: "ClientAliveCountMax 0"
+            line: "ClientAliveCountMax {{ amazon2cis_sshd['clientalivecountmax'] }}"
         notify: restart sshd
   when:
       - amazon2cis_rule_5_3_16