Change var to true to remove pkgs by default

dev-sec · Jun 24, 2015 · 348fb1c · 348fb1c
1 parent 1ff8b21
commit 348fb1c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/roles/ansible-os-hardening/vars/main.yml b/roles/ansible-os-hardening/vars/main.yml
@@ -27,7 +27,7 @@ os_security_suid_sgid_whitelist: []
 os_security_suid_sgid_remove_from_unknown: false
 
 # remove packages with known issues
-os_security_packages_clean: false
+os_security_packages_clean: true
 
 # SYSTEM CONFIGURATION
 # ====================