ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-24 14:23:05 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

1.4.2 to use template

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-01-07 11:10:53 +00:00
parent 115999956f
commit 2d83b7f06d
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB
2 changed files with 11 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

16
tasks/section_1/cis_1.4.x.yml
View file

@ -28,16 +28,12 @@
- rule_1.4.1
- name: "1.4.2 | L1 | PATCH | Ensure filesystem integrity is regularly checked"
cron:
name: Run AIDE integrity check
cron_file: "{{ rhel9cis_aide_cron['cron_file'] }}"
user: "{{ rhel9cis_aide_cron['cron_user'] }}"
minute: "{{ rhel9cis_aide_cron['aide_minute'] | default('0') }}"
hour: "{{ rhel9cis_aide_cron['aide_hour'] | default('5') }}"
day: "{{ rhel9cis_aide_cron['aide_day'] | default('*') }}"
month: "{{ rhel9cis_aide_cron['aide_month'] | default('*') }}"
weekday: "{{ rhel9cis_aide_cron['aide_weekday'] | default('*') }}"
job: "{{ rhel9cis_aide_cron['aide_job'] }}"
template:
src: aide.cron.j2
dest: /etc/cron.d/aide.cron
owner: root
group: root
mode: 0644
when:
- rhel9cis_rule_1_4_2
tags:

5
templates/aide.cron.j2 Normal file
View file

@ -0,0 +1,5 @@
# Run AIDE integrity check
# added via ansible-lockdown remediation
# CIS 1.4.2
{{ rhel9cis_aide_cron['aide_minute'] }} {{ rhel9cis_aide_cron['aide_hour'] }} {{ rhel9cis_aide_cron['aide_month'] }} {{ rhel9cis_aide_cron['aide_weekday'] }} {{ rhel9cis_aide_cron['aide_job'] }}