65a7bc44dc
This patch disables the graphical interface on a system to meet the STIG's requirements. This was only a check previously. Deployers have the option to opt out of this change if they *really* need a graphical interface. Documentation updates and a release note are included. Change-Id: Ia4c4853f7c9b66c6e1ac91c46fb8e7d48c80a408
14 lines
395 B
YAML
14 lines
395 B
YAML
---
|
|
features:
|
|
- |
|
|
The security role now has tasks that will disable the graphical interface
|
|
on a server using upstart (Ubuntu 14.04) or systemd (Ubuntu 16.04 and
|
|
CentOS 7). These changes take effect after a reboot.
|
|
|
|
Deployers that need a graphical interface will need to set the following
|
|
Ansible variable:
|
|
|
|
.. code-block:: yaml
|
|
|
|
security_disable_x_windows: no
|