ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-24 22:23:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

initial v2

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2024-07-24 14:05:46 +01:00
parent 6ea105374a
commit 3b346f7fe1
No known key found for this signature in database
GPG key ID: 997FF7FE93AEB5B9
11 changed files with 1415 additions and 814 deletions
Download patch file Download diff file Expand all files Collapse all files

38
tasks/section_6/main.yml
View file

@ -1,9 +1,39 @@
---
- name: "SECTION | 6.1 | System File Permissions"
- name: "SECTION | 6.1 | Configure Integrity Checking"
ansible.builtin.import_tasks:
file: cis_6.1.x.yml
file: cis_6.1.x.yml
- name: "SECTION | 6.2 | User and Group Settings"
- name: "SECTION | 6.2.1 | Configure systemd-journald service"
ansible.builtin.import_tasks:
file: cis_6.2.x.yml
file: cis_6.2.1.x.yml
- name: "SECTION | 6.2.2 | Configure journald"
when: rhel9cis_syslog == 'journald'
ansible.builtin.import_tasks:
file: cis_6.2.2.1.x.yml
- name: "SECTION | 6.2.3 | Configure rsyslog"
when: rhel9cis_syslog == 'rsyslog'
ansible.builtin.import_tasks:
file: cis_6.2.3.x.yml
- name: "SECTION | 6.2.4.1 | Configure Logfiles"
ansible.builtin.import_tasks:
file: cis_6.2.4.1.yml
- name: "SECTION | 6.3.1 | Configure auditd Service"
ansible.builtin.import_tasks:
file: cis_6.3.1.x.yml
- name: "SECTION | 6.3.2 | Configure Data Retention"
ansible.builtin.import_tasks:
file: cis_6.3.2.x.yml
- name: "SECTION | 6.3.3 | Configure auditd Rules"
ansible.builtin.import_tasks:
file: cis_6.3.3.x.yml
- name: "SECTION | 6.3.4 | Configure auditd File Access"
ansible.builtin.import_tasks:
file: cis_6.3.4.x.yml