openstack/ansible-hardening
Code Issues Proposed changes

Make default NTP servers more global

Browse Source 
This patch uses a more global list of NTP servers as the default
for chrony.

Change-Id: I09b80082af2712a1feea47823e0f2996ec17aea4
This commit is contained in:
Major Hayden 2017-09-12 09:54:29 -06:00
parent 8dee735213
commit 69481cc72b
No known key found for this signature in database
GPG Key ID: 737051E0C1011FB1
2 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
defaults/main.yml
View File

@ -262,10 +262,10 @@ security_rhel7_session_timeout: 600 # V-72223
security_rhel7_enable_chrony: yes # V-72269
# Use the following NTP servers.
security_ntp_servers:
- 0.north-america.pool.ntp.org
- 1.north-america.pool.ntp.org
- 2.north-america.pool.ntp.org
- 3.north-america.pool.ntp.org
- 0.pool.ntp.org
- 1.pool.ntp.org
- 2.pool.ntp.org
- 3.pool.ntp.org
# Restrict mail relaying.
security_rhel7_restrict_mail_relaying: yes # V-72297
# Deploy a login banner. # V-72225 / V-71863

6
releasenotes/notes/global-ntp-servers-155c1daef3680025.yaml Normal file
View File

@ -0,0 +1,6 @@
---
features:
- |
The default list of NTP servers for chrony are now more friendly to users
outside North America. Deployers can still provide their own list of NTP
servers with the ``security_ntp_servers`` Ansible variable.