mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-26 07:03:07 +00:00
lint
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
572f14ef6b
commit
3321547bfa
4 changed files with 57 additions and 57 deletions
|
|
@ -5,12 +5,12 @@
|
|||
- name: "3.1.1 | PATCH | Ensure IPv6 status is identified"
|
||||
block:
|
||||
- name: "3.1.1 | PATCH | Ensure IPv6 status is identified | refresh"
|
||||
set_fact:
|
||||
ansible.builtin.set_fact:
|
||||
sysctl_update: true
|
||||
flush_ipv6_route: true
|
||||
|
||||
- name: "3.1.1 | PATCH | Ensure IPv6 status is identified | disable"
|
||||
debug:
|
||||
ansible.builtin.debug:
|
||||
msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/60-disable_ipv6.conf"
|
||||
when:
|
||||
- not rhel9cis_ipv6_required
|
||||
|
|
@ -27,21 +27,21 @@
|
|||
- name: "3.1.2 | PATCH | Ensure wireless interfaces are disabled"
|
||||
block:
|
||||
- name: "3.1.2 | AUDIT | Ensure wireless interfaces are disabled | Check if nmcli command is available"
|
||||
command: rpm -q NetworkManager
|
||||
ansible.builtin.command: rpm -q NetworkManager
|
||||
changed_when: false
|
||||
failed_when: false
|
||||
check_mode: false
|
||||
register: rhel_08_nmcli_available
|
||||
|
||||
- name: "3.1.2 | AUDIT | Ensure wireless interfaces are disabled | Check if wifi is enabled"
|
||||
command: nmcli radio wifi
|
||||
ansible.builtin.command: nmcli radio wifi
|
||||
register: rhel_08_wifi_enabled
|
||||
changed_when: rhel_08_wifi_enabled.stdout != "disabled"
|
||||
failed_when: false
|
||||
when: rhel_08_nmcli_available.rc == 0
|
||||
|
||||
- name: "3.1.2 | PATCH | Ensure wireless interfaces are disabled | Disable wifi if enabled"
|
||||
command: nmcli radio all off
|
||||
ansible.builtin.command: nmcli radio all off
|
||||
changed_when: false
|
||||
failed_when: false
|
||||
when: rhel_08_wifi_enabled is changed
|
||||
|
|
@ -54,7 +54,7 @@
|
|||
- rule_3.1.2
|
||||
|
||||
- name: "3.1.3 | PATCH | Ensure TIPC is disabled"
|
||||
template:
|
||||
ansible.builtin.template:
|
||||
src: "etc/modprobe.d/modprobe.conf.j2"
|
||||
dest: "/etc/modprobe.d/{{ item }}.conf"
|
||||
mode: "0600"
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue