From 829766b949f3bb2ed5b1241ef92f372b9069b266 Mon Sep 17 00:00:00 2001 From: Nuno Carvalho Date: Mon, 16 Oct 2023 15:42:54 +0200 Subject: [PATCH] Update cis_5.6.x.yml --- tasks/section_5/cis_5.6.x.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/tasks/section_5/cis_5.6.x.yml b/tasks/section_5/cis_5.6.x.yml index 15f1a78..909d3af 100644 --- a/tasks/section_5/cis_5.6.x.yml +++ b/tasks/section_5/cis_5.6.x.yml @@ -98,12 +98,11 @@ regexp: '^USERGROUPS_ENAB' line: USERGROUPS_ENAB no - - name: "5.6.5 | PATCH | Ensure default user umask is 027 or more restrictive | Force umask sessions /etc/pam.d/system-auth" + - name: "5.6.5 | PATCH | Ensure default user umask is 027 or more restrictive | Force umask sessions /etc/pam.d/system-auth" ansible.builtin.lineinfile: path: /etc/pam.d/system-auth line: 'session required pam_umask.so' insertafter: EOF - when: - rhel9cis_rule_5_6_5 tags: