From 2dadff76dc228dc798edd54ac48ee9f91bcdbb4f Mon Sep 17 00:00:00 2001 From: "root@DERVISHx" Date: Tue, 17 Oct 2023 15:08:11 +0100 Subject: [PATCH] Add SSH Variables the proper way, condition entries correct. Signed-off-by: root@DERVISHx --- tasks/section_5/cis_5.2.x.yml | 2 +- vars/RedHat.yml | 4 +++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/tasks/section_5/cis_5.2.x.yml b/tasks/section_5/cis_5.2.x.yml index d3dd9ce..34a8f4c 100644 --- a/tasks/section_5/cis_5.2.x.yml +++ b/tasks/section_5/cis_5.2.x.yml @@ -278,7 +278,7 @@ - name: "5.2.15 | PATCH | Ensure SSH warning banner is configured" ansible.builtin.lineinfile: path: "{{ rhel9_cis_sshd_config_file }}" - regexp: '^#Banner|^Banner' + regexp: "^#Banner|^Banner" line: 'Banner /etc/issue.net' when: - rhel9cis_rule_5_2_15 diff --git a/vars/RedHat.yml b/vars/RedHat.yml index c9d72ce..d94dd21 100644 --- a/vars/RedHat.yml +++ b/vars/RedHat.yml @@ -4,11 +4,13 @@ os_gpg_key_pubkey_name: gpg-pubkey-fd431d51-4ae0493b os_gpg_key_pubkey_content: "Red Hat, Inc. (release key 2) fd431d51" +# Vars setup for overiding main.yml rhel9cis_sshd: +n Redhat Stream. clientalivecountmax: 3 clientaliveinterval: 900 logingracetime: 60 # allowusers: allowgroups: sshd wheel # denyusers: - # denygroups: \ No newline at end of file + # denygroups: