From 3f76affa5b0d653f9c287d92ce352f401fd3acee Mon Sep 17 00:00:00 2001
From: Mark Bolwell <mark.bollyuk@gmail.com>
Date: Fri, 20 Jan 2023 13:34:30 +0000
Subject: [PATCH] changed_when for idempotency. 5.6.

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
---
 tasks/section_5/cis_5.6.x.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tasks/section_5/cis_5.6.x.yml b/tasks/section_5/cis_5.6.x.yml
index 884efd8..6100b0b 100644
--- a/tasks/section_5/cis_5.6.x.yml
+++ b/tasks/section_5/cis_5.6.x.yml
@@ -116,6 +116,7 @@
   block:
       - name: "5.6.6 | PATCH | Ensure root password is set"
         ansible.builtin.shell: passwd -S root | grep "Password set, SHA512 crypt"
+        changed_when: false
         register: root_passwd
 
       - name: "5.6.6 | PATCH | Ensure root password is set"