ansible-hardening/releasenotes
Andy McCrae c05e36f48d Change PermitRootLogin to allow alternate options
PermitRootLogin can be 'yes', 'no', 'without-password',
'prohibit-password' or 'forced-commands-only'.
This patch changes the functionality to ensure that
security_sshd_permit_root_login is one of the above settings - if so, it
will use that value.

Due to the way Ansible handles "no" and "yes", we have to check if the
value is "False" (string equivalent for boolean no), and if so output
"no", otherwise output the string (which would be one of the above
options).

Previously, we could only set this value to 'no'.

Change-Id: I5ee5ff6abc4578d17d4b23d8a2fa1648508ceeed
(cherry picked from commit f32cb3c081)
2017-11-27 10:00:34 +00:00
..
notes Change PermitRootLogin to allow alternate options 2017-11-27 10:00:34 +00:00
source Zuulv3 jobs for Pike 2017-10-24 10:15:32 -05:00