From 1f7b57f171ce9a67d4aa814a40a4a99fcdf3cf1c Mon Sep 17 00:00:00 2001 From: "root@DERVISHx" Date: Fri, 20 Oct 2023 09:17:49 +0100 Subject: [PATCH] Revert "Fix sintax Error on cis_5.2.x.yml" This reverts commit 8319a028d8cf15e5ef4ccfe7d4e57d52448731c8. --- tasks/section_5/cis_5.2.x.yml | 2 +- tasks/section_5/cis_5.6.x.yml | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/tasks/section_5/cis_5.2.x.yml b/tasks/section_5/cis_5.2.x.yml index a5d8291..9054afd 100644 --- a/tasks/section_5/cis_5.2.x.yml +++ b/tasks/section_5/cis_5.2.x.yml @@ -361,7 +361,7 @@ - name: "5.2.20 | PATCH | Ensure SSH Idle Timeout Interval is configured | Ensure SSH ClientAliveCountMax set to <= 3" ansible.builtin.lineinfile: path: "{{ rhel9_cis_sshd_config_file }}" - regexp: '^ClientAliveCountMax|^#ClientAliveCountMax' + regexp: '^ClientAliveCountMax' line: "ClientAliveCountMax {{ rhel9cis_sshd['clientalivecountmax'] }}" validate: sshd -t -f %s when: diff --git a/tasks/section_5/cis_5.6.x.yml b/tasks/section_5/cis_5.6.x.yml index 909d3af..15f1a78 100644 --- a/tasks/section_5/cis_5.6.x.yml +++ b/tasks/section_5/cis_5.6.x.yml @@ -98,11 +98,12 @@ regexp: '^USERGROUPS_ENAB' line: USERGROUPS_ENAB no - - name: "5.6.5 | PATCH | Ensure default user umask is 027 or more restrictive | Force umask sessions /etc/pam.d/system-auth" + - name: "5.6.5 | PATCH | Ensure default user umask is 027 or more restrictive | Force umask sessions /etc/pam.d/system-auth" ansible.builtin.lineinfile: path: /etc/pam.d/system-auth line: 'session required pam_umask.so' insertafter: EOF + when: - rhel9cis_rule_5_6_5 tags: