openstack-ansible/releasenotes/notes/enable-lsm-bae903e463079a3f...

15 lines
478 B
YAML

---
features:
- |
The Linux Security Module (LSM) that is appropriate for the Linux
distribution in use will be automatically enabled by the security role by
default. Deployers can opt out of this change by setting the following
Ansible variable:
.. code-block:: yaml
security_enable_linux_security_module: False
The documentation for STIG V-51337 has more information about how each
LSM is enabled along with special notes for SELinux.