anchor.diff:  
   Systemd required.
   
  -If you're just interested in the security focused systemd configuration, it's available as a link:systemd.adoc[separate document].
  -
  -If you're interested in testing your host settings, you'll find the link:README.adoc#tests[instructions here].
  -
  -If you're using Ansible, a playbook with most of the above functions implemented is available in my Ansible repository https://github.com/konstruktoid/ansible-role-hardening[konstruktoid/ansible-role-hardening].
  -
  -NOTE: This is a constant work in progress. Make sure you understand what it does. `Read the code`.
  +If you're just interested in the security focused systemd configuration, it's
  +available as a link:systemd.adoc[separate document].
  +
  +If you're interested in testing your host settings, you'll find the
  +link:README.adoc#tests[instructions here].
  +
  +If you're using Ansible, a playbook with most of the above functions implemented
  +is available in my Ansible repository https://github.com/konstruktoid/ansible-role-hardening[konstruktoid/ansible-role-hardening].
  +
  +NOTE: This is a constant work in progress. Make sure you understand what it
  +does. `Read the code`.
   
   == Howto
   Start the installation of the server. +
  
positive.code: Disable `dccp` `sctp` `rds` `tipc` protocols.
  
  ==== 04_disablemnt
  CCE-80137-3, CCE-80138-1, CCE-80139-9, CCE-80140-7, CCE-80141-5, CCE-80142-3, CCE-80143-1,
  UBTU-16-010070
  
  Disable `cramfs` `freevxfs` `jffs2` `hfs` `hfsplus` `squashfs` `udf` `vfat` file systems.
  
  ==== 05_systemdconf
  Disable coredumps and crashshells, set `DefaultLimitNOFILE` and `DefaultLimitNPROC` to 100.
  
  ==== 06_journalctl
  Compress logs, forward to syslog and make log storage persistent.
  
negative.code: ----
  
  == Tests
  There are approximately 400 https://github.com/sstephenson/bats[Bats tests]
  for most of the above settings available in the link:tests/[tests directory].
  
  [source,shell]
  ----
  