feat: disable kdump as per DoD STIG V-72057

tasks/configure_kdump.yml

+---
+# find the documentation of US Department of Defense (DoD) Security Technical
+# Implementation Guide (STIG) V-72057 at
+# https://www.stigviewer.com/stig/red_hat_enterprise_linux_7/2017-07-08/finding/V-72057
+# Quote:
+# "Kernel core dumps may contain the full contents of system memory at the time
+# of the crash. Kernel core dumps may consume a considerable amount of disk
+# space and may result in denial of service by exhausting the available space
+# on the target file system partition."
+- name: disable kdump as per DoD STIG V-72057
+  systemd:
+    name: "kdump.service"
+    state: disabled

tasks/main.yml

@@ -37,6 +37,8 @@
   tags: [iptables]
 - import_tasks: configure_selinux.yml
   tags: [selinux]
+- import_tasks: "configure_kdump.yml"
+  tags: [security, kdump]
 
 ### ROSETTA TASKS