boolean variable true/false

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

tasks/section_5/cis_5.1.x.yml

@@ -3,7 +3,7 @@
 - name: "5.1.1 | L1 | PATCH | Ensure cron daemon is enabled"
   service:
       name: crond
-      enabled: yes
+      enabled: true
   when:
       - rhel9cis_rule_5_1_1
   tags:

tasks/section_5/cis_5.3.x.yml

@@ -8,7 +8,7 @@
             warn: false
         failed_when: false
         changed_when: false
-        check_mode: no
+        check_mode: false
         register: rhel9cis_5_3_1_profiles
 
       - name: "5.3.1 | L1 | AUDIT | Create custom authselect profile | Show profiles"
@@ -39,7 +39,7 @@
             warn: false
         failed_when: false
         changed_when: false
-        check_mode: no
+        check_mode: false
         register: rhel9cis_5_3_2_profiles
 
       - name: "5.3.2 | L1 | AUDIT | Select authselect profile | Show profiles"
@@ -70,7 +70,7 @@
             warn: false
         failed_when: false
         changed_when: false
-        check_mode: no
+        check_mode: false
         register: rhel9cis_5_3_3_profiles_faillock
 
       - name: "5.3.3 | L1 | AUDIT | Ensure authselect includes with-faillock| Show profiles"

tasks/section_5/cis_5.4.x.yml

@@ -95,7 +95,7 @@
         copy:
             src: /etc/pam.d/{{ item }}
             dest: /etc/pam.d/{{ item }}-local
-            remote_src: yes
+            remote_src: true
             owner: root
             group: root
             mode: '0644'
@@ -112,7 +112,7 @@
             src: /etc/pam.d/{{ item }}-local
             dest: /etc/pam.d/{{ item }}
             state: link
-            force: yes
+            force: true
         with_items:
             - "system-auth"
             - "password-auth"

tasks/section_5/cis_5.5.1.x.yml

@@ -50,7 +50,7 @@
             warn: false
         changed_when: false
         failed_when: false
-        check_mode: no
+        check_mode: false
         register: rhel9cis_5_5_1_4_inactive_settings
 
       - name: "5.5.1.4 | L1 | PATCH | Ensure inactive password lock is 30 days or less | Set default inactive setting"
@@ -63,7 +63,7 @@
         shell: 'egrep ^[^:]+:[^\!*] /etc/shadow | cut -d: -f1'
         args:
             warn: false
-        check_mode: no
+        check_mode: false
         register: rhel_09_5_5_1_4_audit
         changed_when: false
 
@@ -89,7 +89,7 @@
             warn: false
         failed_when: false
         changed_when: false
-        check_mode: no
+        check_mode: false
         register: rhel9cis_5_5_1_5_currentut
 
       - name: "5.5.1.5 | L1 | AUDIT | Ensure all users last password change date is in the past | Get list of users with last changed pw date in the future"
@@ -98,7 +98,7 @@
             warn: false
         changed_when: false
         failed_when: false
-        check_mode: no
+        check_mode: false
         register: rhel9cis_5_5_1_5_user_list
 
       - name: "5.5.1.5 | L1 | AUDIT | Ensure all users last password change date is in the past | Alert no pw change in the future exist"

tasks/section_5/cis_5.5.x.yml

@@ -41,7 +41,7 @@
 
 - name: "5.5.3 | L1 | PATCH | Ensure default user shell timeout is 900 seconds or less"
   blockinfile:
-      create: yes
+      create: true
       mode: 0644
       dest: "{{ item.dest }}"
       state: "{{ item.state }}"