ansible-hardening/releasenotes/notes/shosts-file-search-opt-in-887f600a79eef07e.yaml
Major Hayden 9efb8153f1
Make .shosts search/removal opt in
This patch makes the search for .shosts/shosts.equiv files an opt in
operation.

Closes-Bug: 1665568
Change-Id: Ide0c69a4112981e75defeaa317609e6a5f930225
2017-03-07 12:14:15 -06:00

8 lines
293 B
YAML

---
security:
- |
The tasks that search for ``.shosts`` and ``shosts.equiv`` files
(STIG ID: RHEL-07-040330) are now skipped by default. The search takes a
long time to complete on systems with lots of files and it also causes a
significant amount of disk I/O while it runs.