ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-27 15:33:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Revert "Fix sintax Error on cis_5.2.x.yml"

Browse source 
This reverts commit 8319a028d8.
This commit is contained in:
root@DERVISHx 2023-10-20 09:17:49 +01:00
parent 0b6d7833c7
commit 1f7b57f171
2 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tasks/section_5/cis_5.2.x.yml
View file

@ -361,7 +361,7 @@
- name: "5.2.20 | PATCH | Ensure SSH Idle Timeout Interval is configured | Ensure SSH ClientAliveCountMax set to <= 3" - name: "5.2.20 | PATCH | Ensure SSH Idle Timeout Interval is configured | Ensure SSH ClientAliveCountMax set to <= 3"
ansible.builtin.lineinfile: ansible.builtin.lineinfile:
path: "{{ rhel9_cis_sshd_config_file }}" path: "{{ rhel9_cis_sshd_config_file }}"
regexp: '^ClientAliveCountMax|^#ClientAliveCountMax' regexp: '^ClientAliveCountMax'
line: "ClientAliveCountMax {{ rhel9cis_sshd['clientalivecountmax'] }}" line: "ClientAliveCountMax {{ rhel9cis_sshd['clientalivecountmax'] }}"
validate: sshd -t -f %s validate: sshd -t -f %s
when: when:

3
tasks/section_5/cis_5.6.x.yml
View file

@ -98,11 +98,12 @@
regexp: '^USERGROUPS_ENAB' regexp: '^USERGROUPS_ENAB'
line: USERGROUPS_ENAB no line: USERGROUPS_ENAB no
- name: "5.6.5 | PATCH | Ensure default user umask is 027 or more restrictive | Force umask sessions /etc/pam.d/system-auth" - name: "5.6.5 | PATCH | Ensure default user umask is 027 or more restrictive | Force umask sessions /etc/pam.d/system-auth"
ansible.builtin.lineinfile: ansible.builtin.lineinfile:
path: /etc/pam.d/system-auth path: /etc/pam.d/system-auth
line: 'session required pam_umask.so' line: 'session required pam_umask.so'
insertafter: EOF insertafter: EOF
when: when:
- rhel9cis_rule_5_6_5 - rhel9cis_rule_5_6_5
tags: tags: