ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-27 15:33:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Added OS_specific vars

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-02-01 12:33:41 +00:00
parent 44f305c66b
commit 1e7e5e2194
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB
2 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
tasks/main.yml
View file

@ -84,6 +84,11 @@
tags: tags:
- always - always
- name: Include OS specific variables
include_vars: "{{ ansible_distribution }}.yml"
tags:
- always
- name: Include preliminary steps - name: Include preliminary steps
import_tasks: prelim.yml import_tasks: prelim.yml
tags: tags:
@ -105,6 +110,7 @@
include_tasks: parse_etc_password.yml include_tasks: parse_etc_password.yml
when: rhel9cis_section6 when: rhel9cis_section6
tags: tags:
- rule_5.5.2
- rhel9cis_section6 - rhel9cis_section6
- name: run Section 1 tasks - name: run Section 1 tasks

2
tasks/section_1/cis_1.2.x.yml
View file

@ -37,7 +37,7 @@
- rule_1.2.2 - rule_1.2.2
- name: "1.2.3 | L1 | AUDIT | Ensure GPG keys are configured" - name: "1.2.3 | L1 | AUDIT | Ensure GPG keys are configured"
shell: gpg --quiet --with-fingerprint /etc/pki/rpm-gpg/RPM-GPG-KEY-{{ ansible_distribution|lower }}-release shell: gpg --quiet --with-fingerprint "{{ rpm_gpg_key }}"
args: args:
warn: false warn: false
when: when: