From 22a9b085d77b20893623d8fa7935ff45e1a62165 Mon Sep 17 00:00:00 2001
From: Frederick Witty <frederick.witty@gotyto.com>
Date: Thu, 8 Jan 2026 12:23:40 -0500
Subject: [PATCH] fix for #419, thank you @aaronk1

Signed-off-by: Frederick Witty <frederick.witty@gotyto.com>
---
 tasks/section_5/cis_5.1.x.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tasks/section_5/cis_5.1.x.yml b/tasks/section_5/cis_5.1.x.yml
index dc450ea..9600a1c 100644
--- a/tasks/section_5/cis_5.1.x.yml
+++ b/tasks/section_5/cis_5.1.x.yml
@@ -431,6 +431,8 @@
     path: "{{ rhel9cis_sshd_config_file }}"
     regexp: (?i)^(#|)\s*MaxStartups
     line: 'MaxStartups {{ rhel9cis_ssh_maxstartups }}'
+    insertbefore: "^Match"
+    firstmatch: true
     validate: sshd -t -f %s
   notify: Restart sshd