ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2026-05-10 07:33:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Apply container guards and skips for CIS hardening

Browse source 
Signed-off-by: DayneD89 <dayned89@gmail.com>
This commit is contained in:
DayneD89 2026-04-30 14:48:38 -05:00
parent c7ed4de9a8
commit 5ab951145c
No known key found for this signature in database
GPG key ID: 53DEA2240A4E3A67
10 changed files with 113 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

8
tasks/section_6/cis_6.2.1.x.yml
View file

@ -1,7 +1,9 @@
---
- name: "6.2.1.1 | PATCH | Ensure journald service is enabled and active"
when: rhel9cis_rule_6_2_1_1
when:
- rhel9cis_rule_6_2_1_1
- not system_is_container
tags:
- level1-server
- level1-workstation
@ -86,7 +88,9 @@
- '^(\s*MaxFileSec\s*=.*)'
- name: "6.2.1.4 | PATCH | Ensure only one logging system is in use"
when: rhel9cis_rule_6_2_1_4
when:
- rhel9cis_rule_6_2_1_4
- not system_is_container
tags:
- level1-server
- level1-workstation