From 18493b5c37b04721d23d90d9887ea98d37427c8d Mon Sep 17 00:00:00 2001 From: polski_g Date: Tue, 3 Jun 2025 15:38:45 -0400 Subject: [PATCH] add disablement flag for the gdm controls (1.8.x) Signed-off-by: polski-g --- defaults/main.yml | 2 ++ tasks/section_1/main.yml | 1 + 2 files changed, 3 insertions(+) diff --git a/defaults/main.yml b/defaults/main.yml index 23312e5..bf40e8f 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -592,6 +592,8 @@ rhel9cis_warning_banner: Authorized users only. All activity may be monitored an # End Banner ## Control 1.8.x - Settings for GDM +# do not run Control 1.8.x if using a display manager different than gdm +rhel9cis_display_manager: "gdm" ## 1.8 GDM graphical interface rhel9cis_gui: "{{ prelim_gnome_present.stat.exists | default(false) }}" # This variable specifies the GNOME configuration database file to which configurations are written. diff --git a/tasks/section_1/main.yml b/tasks/section_1/main.yml index 5d99f48..8c1f39b 100644 --- a/tasks/section_1/main.yml +++ b/tasks/section_1/main.yml @@ -61,5 +61,6 @@ file: cis_1.7.x.yml - name: "SECTION | 1.8 | Gnome Display Manager" + when: rhel9cis_display_manager == 'gdm' ansible.builtin.import_tasks: file: cis_1.8.x.yml