ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-24 22:23:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

added #298 & #299 thanks to @brent-bean

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2025-02-26 08:27:12 +00:00
parent 48a471a037
commit 5c919fb19d
No known key found for this signature in database
GPG key ID: 997FF7FE93AEB5B9
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
tasks/section_6/cis_6.2.2.1.x.yml
View file

@ -17,7 +17,7 @@
name: systemd-journal-remote name: systemd-journal-remote
state: present state: present
- name: "6.2.2.1.2 | PATCH | Ensure systemd-journal-remote authentication is configured" - name: "6.2.2.1.2 | PATCH | Ensure systemd-journal-upload authentication is configured"
when: when:
- rhel9cis_rule_6_2_2_1_2 - rhel9cis_rule_6_2_2_1_2
- not rhel9cis_system_is_log_server - not rhel9cis_system_is_log_server
@ -40,7 +40,7 @@
- { regexp: 'ServerCertificateFile=', line: 'ServerCertificateFile={{ rhel9cis_journal_servercertificatefile }}'} - { regexp: 'ServerCertificateFile=', line: 'ServerCertificateFile={{ rhel9cis_journal_servercertificatefile }}'}
- { regexp: 'TrustedCertificateFile=', line: 'TrustedCertificateFile={{ rhel9cis_journal_trustedcertificatefile }}'} - { regexp: 'TrustedCertificateFile=', line: 'TrustedCertificateFile={{ rhel9cis_journal_trustedcertificatefile }}'}
- name: "6.2.2.1.3 | PATCH | Ensure systemd-journal-remote is enabled and active" - name: "6.2.2.1.3 | PATCH | Ensure systemd-journal-upload is enabled and active"
when: when:
- not rhel9cis_system_is_log_server - not rhel9cis_system_is_log_server
- rhel9cis_rule_6_2_2_1_3 - rhel9cis_rule_6_2_2_1_3