mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-24 22:23:06 +00:00
Fixing inconsistencies between rule ids in title, tags and when.
Signed-off-by: Diana-Maria Dumitru <diana.dumitru@siemens.com>
This commit is contained in:
parent
182e07a63f
commit
4329591c90
5 changed files with 6 additions and 6 deletions
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
- name: "1/.1 | PATCH | Ensure /var/log is a separate partition"
|
- name: "1.1.2.6.1 | PATCH | Ensure /var/log is a separate partition"
|
||||||
when:
|
when:
|
||||||
- rhel9cis_rule_1_1_2_6_1
|
- rhel9cis_rule_1_1_2_6_1
|
||||||
- required_mount not in prelim_mount_names
|
- required_mount not in prelim_mount_names
|
||||||
|
|
|
||||||
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
- name: "1/.1 | PATCH | Ensure /var/log/audit is a separate partition"
|
- name: "1.1.2.7.1 | PATCH | Ensure /var/log/audit is a separate partition"
|
||||||
when:
|
when:
|
||||||
- rhel9cis_rule_1_1_2_7_1
|
- rhel9cis_rule_1_1_2_7_1
|
||||||
- required_mount not in prelim_mount_names
|
- required_mount not in prelim_mount_names
|
||||||
|
|
|
||||||
|
|
@ -240,12 +240,12 @@
|
||||||
- rule_3.3.9
|
- rule_3.3.9
|
||||||
- NIST800-53R5_AU-3
|
- NIST800-53R5_AU-3
|
||||||
block:
|
block:
|
||||||
- name: "3.3.4 | PATCH | Ensure suspicious packets are logged | Set Fact"
|
- name: "3.3.9 | PATCH | Ensure suspicious packets are logged | Set Fact"
|
||||||
ansible.builtin.set_fact:
|
ansible.builtin.set_fact:
|
||||||
rhel9cis_sysctl_update: true
|
rhel9cis_sysctl_update: true
|
||||||
rhel9cis_flush_ipv4_route: true
|
rhel9cis_flush_ipv4_route: true
|
||||||
|
|
||||||
- name: "3.3.4 | PATCH | Ensure suspicious packets are logged"
|
- name: "3.3.9 | PATCH | Ensure suspicious packets are logged"
|
||||||
ansible.builtin.debug:
|
ansible.builtin.debug:
|
||||||
msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/60-netipv4_sysctl.conf"
|
msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/60-netipv4_sysctl.conf"
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -61,7 +61,7 @@
|
||||||
- level1-server
|
- level1-server
|
||||||
- level1-workstation
|
- level1-workstation
|
||||||
- patch
|
- patch
|
||||||
- rule_5.4.2.2
|
- rule_5.4.2.3
|
||||||
- user
|
- user
|
||||||
- system
|
- system
|
||||||
- NIST800-53R5_CM-1
|
- NIST800-53R5_CM-1
|
||||||
|
|
|
||||||
|
|
@ -27,9 +27,9 @@
|
||||||
- level2-workstation
|
- level2-workstation
|
||||||
- patch
|
- patch
|
||||||
- auditd
|
- auditd
|
||||||
- rule_6.3.4.1
|
|
||||||
- rule_6.3.4.2
|
- rule_6.3.4.2
|
||||||
- rule_6.3.4.3
|
- rule_6.3.4.3
|
||||||
|
- rule_6.3.4.4
|
||||||
- NIST800-53R5_AU-3
|
- NIST800-53R5_AU-3
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
path: "{{ prelim_auditd_logfile.stdout }}"
|
path: "{{ prelim_auditd_logfile.stdout }}"
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue