Workaround for dev-sec/ansible-collection-hardening#723

uoaerg · Jan 16, 2024 · 36d4e02 · 36d4e02
1 parent 46b0e70
commit 36d4e02
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/ansible-zammad/inventory/group_vars/all.yml b/ansible-zammad/inventory/group_vars/all.yml
@@ -40,5 +40,7 @@ zammad_letsencrypt_email: [email protected]
 monitoring_letsencrypt_email: [email protected]
 sysctl_overwrite:
   net.ipv4.ip_forward: 1
+sysctl_unsupported_entries:
+  - kernel.unprivileged_userns_clone
 os_filesystem_whitelist:  # os_hardening is meant to detect when EFI is in use, but doesn't https://github.com/dev-sec/ansible-collection-hardening/issues/288
   - vfat