Code Review / ta / infra-ansible.git / blobdiff
? search:
summary | shortlog | log | commit | commitdiff | review | tree
raw | inline | side by side
Initial commit
[ta/infra-ansible.git] / roles / audit / templates / 52-sandbox.rules.j2
diff --git a/roles/audit/templates/52-sandbox.rules.j2 b/roles/audit/templates/52-sandbox.rules.j2
new file mode 100644 (file)
index 0000000..54e05d6
--- /dev/null
+++ b/roles/audit/templates/52-sandbox.rules.j2
@@ -0,0 +1,3 @@
+## sandbox
+-a always,exit -F arch=b32 -S seccomp -F key=32bit_seccomp
+-a always,exit -F arch=b64 -S seccomp -F key=64bit_seccomp
This repository contains all the generic deployment playbooks, which configure services running directly on the host. Includes playbooks for disk partitioning, Ceph configuration, hardening, security, SSH, operating system level user management etc.