ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2026-05-10 07:33:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Improved mask logic and package names

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2026-04-08 13:51:01 +01:00
parent 201edf02e4
commit 53561fbf08
No known key found for this signature in database
GPG key ID: 997FF7FE93AEB5B9
3 changed files with 16 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

4
tasks/section_6/cis_6.2.2.1.x.yml
View file

@ -72,8 +72,8 @@
- NIST800-53R5_AU-12
ansible.builtin.systemd:
name: "{{ item }}"
state: stopped
enabled: false
state: "{{ ('systemd-journal-remote' in ansible_facts.packages) | ternary('stopped', omit) }}"
enabled: "{{ ('systemd-journal-remote' in ansible_facts.packages) | ternary(false, omit) }}"
masked: true
loop:
- systemd-journal-remote.socket