{
    "aide_cron_job_path": "/etc/cron.daily/aide",
    "aide_database_file": "/var/lib/aide/aide.db",
    "aide_database_out_file": "/var/lib/aide/aide.db.new",
    "cache_timeout": 600,
    "chrony_conf_file": "/etc/chrony/chrony.conf",
    "chrony_key_file": "/etc/chrony/chrony.keys",
    "chrony_service": "chrony",
    "clamav_service": "clamav-daemon",
    "cron_service": "cron",
    "daemon_init_params_file": "/etc/init.d/rc",
    "grub_conf_file": "/boot/grub/grub.cfg",
    "grub_conf_file_efi": "/boot/efi/EFI/ubuntu/grub.cfg",
    "grub_update_cmd": "/usr/sbin/update-grub",
    "pam_auth_file": "/etc/pam.d/common-auth",
    "pam_password_file": "/etc/pam.d/common-password",
    "pam_postlogin_file": "/etc/pam.d/login",
    "security_interactive_user_minimum_uid": 500,
    "ssh_keysign_path": "/usr/lib/openssh",
    "ssh_service": "ssh",
    "stig_packages_rhel7": [
        {
            "enabled": true,
            "packages": [
                "auditd",
                "audispd-plugins",
                "libpwquality-common",
                "openssh-client",
                "openssh-server",
                "screen"
            ],
            "state": "{{ security_package_state }}"
        },
        {
            "enabled": "{{ security_rhel7_enable_aide }}",
            "packages": [
                "aide",
                "aide-common"
            ],
            "state": "{{ security_package_state }}"
        },
        {
            "enabled": "{{ security_rhel7_enable_linux_security_module }}",
            "packages": [
                "apparmor",
                "apparmor-profiles",
                "apparmor-utils"
            ],
            "state": "{{ security_package_state }}"
        },
        {
            "enabled": "{{ security_rhel7_enable_chrony }}",
            "packages": [
                "chrony"
            ],
            "state": "{{ security_package_state }}"
        },
        {
            "enabled": "{{ security_enable_virus_scanner }}",
            "packages": [
                "clamav",
                "clamav-daemon",
                "clamav-freshclam"
            ],
            "state": "{{ security_package_state }}"
        },
        {
            "enabled": "{{ security_enable_firewalld }}",
            "packages": [
                "firewalld"
            ],
            "state": "{{ security_package_state }}"
        },
        {
            "enabled": "{{ security_rhel7_automatic_package_updates }}",
            "packages": [
                "unattended-upgrades"
            ],
            "state": "{{ security_package_state }}"
        },
        {
            "enabled": "{{ security_pwquality_apply_rules }}",
            "packages": [
                "libpam-pwquality"
            ],
            "state": "{{ security_package_state }}"
        },
        {
            "enabled": "{{ security_rhel7_remove_rsh_server }}",
            "packages": [
                "rsh-server"
            ],
            "state": "absent"
        },
        {
            "enabled": "{{ security_rhel7_remove_telnet_server }}",
            "packages": [
                "telnetd"
            ],
            "state": "absent"
        },
        {
            "enabled": "{{ security_rhel7_remove_tftp_server }}",
            "packages": [
                "tftpd"
            ],
            "state": "absent"
        },
        {
            "enabled": "{{ security_rhel7_remove_xorg }}",
            "packages": [
                "xorg-xserver"
            ],
            "state": "absent"
        },
        {
            "enabled": "{{ security_rhel7_remove_ypserv }}",
            "packages": [
                "nis"
            ],
            "state": "absent"
        }
    ],
    "vsftpd_conf_file": "/etc/vsftpd.conf"
}

[
    "/home/zuul/src/opendev.org/openstack/ansible-hardening/vars/debian.yml"
]

False