diff --git a/tasks/main.yml b/tasks/main.yml index 264120a..1b240f7 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -55,7 +55,7 @@ when: - rhel9cis_set_boot_pass - rhel9cis_rule_1_4_1 - tags: + tags: - always - name: "check sugroup exists if used" diff --git a/tasks/section_3/cis_3.4.1.x.yml b/tasks/section_3/cis_3.4.1.x.yml index 3518b42..caabdb5 100644 --- a/tasks/section_3/cis_3.4.1.x.yml +++ b/tasks/section_3/cis_3.4.1.x.yml @@ -31,7 +31,7 @@ package: name: iptables-services state: absent - when: + when: when: - rhel9cis_rule_3_4_1_2 - "'iptables-services' in ansible_facts.packages" diff --git a/tasks/section_3/main.yml b/tasks/section_3/main.yml index a263c0b..6795a67 100644 --- a/tasks/section_3/main.yml +++ b/tasks/section_3/main.yml @@ -18,4 +18,3 @@ include_tasks: cis_3.4.2.x.yml when: - rhel9cis_firewall == "nftables" - diff --git a/tasks/section_4/cis_4.3.yml b/tasks/section_4/cis_4.3.yml index 2ba5f1f..959fd62 100644 --- a/tasks/section_4/cis_4.3.yml +++ b/tasks/section_4/cis_4.3.yml @@ -2,8 +2,8 @@ - name: "4.3.1 | PATCH | Ensure logrotate is installed" package: - name: rsyslog-logrotate - state: present + name: rsyslog-logrotate + state: present when: - rhel9cis_rule_4_3_1 tags: @@ -16,9 +16,9 @@ - name: "4.3.2 | PATCH | Ensure logrotate is running and enabled" systemd: - name: logrotate - state: started - enabled: true + name: logrotate + state: started + enabled: true when: - rhel9cis_rule_4_3_2 tags: