ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-24 22:23:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

update EOL spacing

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-08-08 18:53:23 +01:00
parent 4878eff7a7
commit 0b6bb8afd7
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
12 changed files with 14 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.gitignore vendored
View file

@ -12,7 +12,7 @@ delete*
ignore* ignore*
test_inv test_inv
# temp remove doc while this is built up # temp remove doc while this is built up
doc/ doc/
# VSCode # VSCode
.vscode .vscode

2
templates/ansible_vars_goss.yml.j2
View file

@ -486,7 +486,7 @@ rhel9cis_authselect_custom_profile_create: {{ rhel9cis_authselect_custom_profile
# 5.5.1 # 5.5.1
## PAM ## PAM
rhel9cis_pam_password: rhel9cis_pam_password:
minlen: {{ rhel9cis_pam_password['minlen'] }} minlen: {{ rhel9cis_pam_password['minlen'] }}
minclass: {{ rhel9cis_pam_password['minclass'] }} minclass: {{ rhel9cis_pam_password['minclass'] }}
rhel9cis_pam_passwd_retry: "3" rhel9cis_pam_passwd_retry: "3"

4
templates/audit/98_auditd_exception.rules.j2
View file

@ -1,10 +1,10 @@
## Ansible controlled file ## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline # Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC # provided by MindPointGroup LLC
### YOUR CHANGES WILL BE LOST! ### YOUR CHANGES WILL BE LOST!
# This file contains users whose actions are not logged by auditd # This file contains users whose actions are not logged by auditd
{% if rhel9cis_allow_auditd_uid_user_exclusions %} {% if rhel9cis_allow_auditd_uid_user_exclusions %}
{% for user in rhel9cis_auditd_uid_exclude %} {% for user in rhel9cis_auditd_uid_exclude %}
-a never,user -F uid!={{ user }} -F auid!={{ user }} -a never,user -F uid!={{ user }} -F auid!={{ user }}
{% endfor %} {% endfor %}

2
templates/audit/99_auditd.rules.j2
View file

@ -1,5 +1,5 @@
## Ansible controlled file ## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline # Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC # provided by MindPointGroup LLC
### YOUR CHANGES WILL BE LOST! ### YOUR CHANGES WILL BE LOST!

2
templates/etc/dconf/db/00-automount_lock.j2
View file

@ -1,5 +1,5 @@
## Ansible controlled file ## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline # Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC # provided by MindPointGroup LLC
# Lock desktop media-handling automount setting # Lock desktop media-handling automount setting

4
templates/etc/dconf/db/00-autorun_lock.j2
View file

@ -1,6 +1,6 @@
## Ansible controlled file ## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline # Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC # provided by MindPointGroup LLC
# Lock desktop media-handling settings # Lock desktop media-handling settings
/org/gnome/desktop/media-handling/autorun-never /org/gnome/desktop/media-handling/autorun-never

2
templates/etc/dconf/db/00-media-automount.j2
View file

@ -1,5 +1,5 @@
## Ansible controlled file ## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline # Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC # provided by MindPointGroup LLC
[org/gnome/desktop/media-handling] [org/gnome/desktop/media-handling]

2
templates/etc/dconf/db/00-media-autorun.j2
View file

@ -1,5 +1,5 @@
## Ansible controlled file ## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline # Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC # provided by MindPointGroup LLC
[org/gnome/desktop/media-handling] [org/gnome/desktop/media-handling]

2
templates/etc/dconf/db/00-screensaver.j2
View file

@ -1,5 +1,5 @@
## Ansible controlled file ## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline # Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC # provided by MindPointGroup LLC
# Specify the dconf path # Specify the dconf path

2
templates/etc/dconf/db/00-screensaver_lock.j2
View file

@ -1,5 +1,5 @@
## Ansible controlled file ## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline # Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC # provided by MindPointGroup LLC
# Lock desktop screensaver idle-delay setting # Lock desktop screensaver idle-delay setting

2
templates/etc/dconf/db/gdm.d/01-banner-message.j2
View file

@ -1,5 +1,5 @@
## Ansible controlled file ## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline # Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC # provided by MindPointGroup LLC
[org/gnome/login-screen] [org/gnome/login-screen]

2
templates/etc/sysctl.d/60-disable_ipv6.conf.j2
View file

@ -2,6 +2,6 @@
# IPv6 disable # IPv6 disable
{% if rhel9cis_rule_3_1_1 and rhel9cis_ipv6_required %} {% if rhel9cis_rule_3_1_1 and rhel9cis_ipv6_required %}
net.ipv6.conf.all.disable_ipv6 = 1 net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1 net.ipv6.conf.default.disable_ipv6 = 1
{% endif %} {% endif %}