lint updates

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

tasks/section_3/cis_3.3.x.yml

@@ -65,6 +65,7 @@
         set_fact:
             sysctl_update: true
             flush_ipv4_route: true
+
       - name: "3.3.3 | PATCH | Ensure secure ICMP redirects are not accepted"
         debug:
             msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/60-netipv4_sysctl.conf"
@@ -140,6 +141,7 @@
         set_fact:
             sysctl_update: true
             flush_ipv4_route: true
+
       - name: "3.3.7 | PATCH | Ensure Reverse Path Filtering is enabled"
         debug:
             msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/60-netipv4_sysctl.conf"

tasks/section_3/cis_3.4.2.x.yml

@@ -172,7 +172,7 @@
   tags:
       - level1-server
       - level1-workstation
-      - automate
+      - automated
       - patch
       - nftables
       - rule_3.4.2.6

tasks/section_4/cis_4.2.1.x.yml

@@ -65,7 +65,6 @@
   block:
       - name: "4.2.1.5 | AUDIT | Ensure logging is configured | rsyslog current config message out"
         command: cat /etc/rsyslog.conf
-        become: true
         changed_when: false
         failed_when: false
         check_mode: false

templates/audit/98_auditd_exception.rules.j2

@@ -5,4 +5,4 @@
 {% for user in rhel9cis_auditd_uid_exclude %}
 -a never,user -F uid!={{ user }} -F auid!={{ user }}
 {% endfor %}
-{% endif %}
+{% endif %}

templates/etc/modprobe.d/modprobe.conf.j2

@@ -3,4 +3,4 @@
 # https://github.com/ansible-lockdown
 ## This file is managed by Ansible, YOUR CHANGES WILL BE LOST!
 
-install {{ item }} /bin/true
+install {{ item }} /bin/true