mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2026-03-25 14:27:12 +00:00
Update handler naming change_requires_reboot to set reboot required
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
This commit is contained in:
parent
3a0ee6e9f8
commit
6ced990430
3 changed files with 7 additions and 11 deletions
|
|
@ -150,7 +150,7 @@
|
|||
ansible.posix.mount:
|
||||
path: "{{ mount_point }}"
|
||||
state: remounted
|
||||
notify: Change_requires_reboot
|
||||
notify: Set reboot required
|
||||
listen: "Remount /boot/efi"
|
||||
|
||||
- name: Reload sysctl
|
||||
|
|
@ -194,7 +194,7 @@
|
|||
ansible.builtin.command: update-crypto-policies --set "{{ rhel9cis_full_crypto_policy }}"
|
||||
changed_when: true
|
||||
notify:
|
||||
- Change_requires_reboot
|
||||
- Set reboot required
|
||||
- Restart sshd
|
||||
|
||||
- name: Restart firewalld
|
||||
|
|
@ -255,7 +255,7 @@
|
|||
when: discovered_auditd_immutable_check.stdout == '1'
|
||||
ansible.builtin.debug:
|
||||
msg: "Reboot required for auditd to apply new rules as immutable set"
|
||||
notify: Change_requires_reboot
|
||||
notify: Set reboot required
|
||||
|
||||
- name: Stop auditd process
|
||||
ansible.builtin.command: systemctl kill auditd
|
||||
|
|
@ -268,6 +268,6 @@
|
|||
state: started
|
||||
listen: Restart auditd
|
||||
|
||||
- name: Change_requires_reboot
|
||||
- name: Set reboot required
|
||||
ansible.builtin.set_fact:
|
||||
change_requires_reboot: true
|
||||
|
|
|
|||
|
|
@ -4,9 +4,7 @@
|
|||
# List users in order to look files inside each home directory
|
||||
|
||||
- name: "PRELIM | Include audit specific variables"
|
||||
when:
|
||||
- run_audit or audit_only
|
||||
- setup_audit
|
||||
when: run_audit or audit_only or setup_audit
|
||||
tags:
|
||||
- setup_audit
|
||||
- run_audit
|
||||
|
|
@ -14,9 +12,7 @@
|
|||
file: audit.yml
|
||||
|
||||
- name: "PRELIM | Include pre-remediation audit tasks"
|
||||
when:
|
||||
- run_audit or audit_only
|
||||
- setup_audit
|
||||
when: run_audit or audit_only or setup_audit
|
||||
tags: run_audit
|
||||
ansible.builtin.import_tasks: pre_remediation_audit.yml
|
||||
|
||||
|
|
|
|||
|
|
@ -13,4 +13,4 @@
|
|||
ansible.builtin.package:
|
||||
name: "*"
|
||||
state: latest
|
||||
notify: Change_requires_reboot
|
||||
notify: Set reboot required
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue