openstack/ansible-hardening
Code Issues Proposed changes

Fix logic error

Browse Source 
if security_sshd_permit_root_login is not set to yes, we should
override this and template a "no", instead of templating a "no"
when the value is set to yes.

Change-Id: I747a8818762119eee63fa03d175b66ae4021f6da
Closes-Bug: #1685194
This commit is contained in:
Jean-Philippe Evrard 2017-10-16 13:04:05 +00:00
parent 75c06173c7
commit 2cf232ae62
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
templates/sshd_config_block.j2
View File

@ -22,7 +22,7 @@ ClientAliveCountMax {{ security_sshd_client_alive_count_max }}
# V-72245
PrintLastLog yes
{% endif %}
{% if security_sshd_permit_root_login | bool %}
{% if not (security_sshd_permit_root_login | bool) %}
# V-72247
PermitRootLogin no
{% endif %}