ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-24 22:23:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

moved su check to prelim

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-01-25 09:29:19 +00:00
parent 2439154969
commit 64a3e26e4f
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
2 changed files with 20 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

19
tasks/main.yml
View file

@ -80,25 +80,6 @@
tags:
- always
- name: Check sugroup exists if used
block:
- name: "Check su group exists if defined"
ansible.builtin.shell: grep -w "{{ rhel9cis_sugroup }}" /etc/group
register: sugroup_exists
changed_when: false
failed_when: sugroup_exists.rc >= 2
tags:
- skip_ansible_lint
- name: Check sugroup if defined exists before continuing
ansible.builtin.assert:
that: sugroup_exists.rc == 0
msg: "The variable rhel9cis_sugroup is defined but does not exist please rectify"
when:
- rhel9cis_sugroup is defined
- rhel9cis_rule_5_7
tags:
- rule_5.7
- name: Gather the package facts
ansible.builtin.package_facts: