diff --git a/.github/workflows/communitytodevel.yml b/.github/workflows/communitytodevel.yml index 9ad4d78..ed9f0c7 100644 --- a/.github/workflows/communitytodevel.yml +++ b/.github/workflows/communitytodevel.yml @@ -34,6 +34,6 @@ jobs: # Job ID job_id: 5f933cbcf9c74e86b1609c00 # Variables - variables: '{ "gitrepo": "https://github.com/ansible-lockdown/RHEL9-CIS.git", "image": "ami-04483b15b4268d18d", "githubBranch": "${{ github.head_ref }}", "username": "centos" }' + variables: '{ "gitrepo": "https://github.com/ansible-lockdown/RHEL9-CIS.git", "image": "ami-0335e1660e1197d63", "githubBranch": "${{ github.head_ref }}", "username": "rocky" }' # Refactr API base URL api_url: # optional diff --git a/.github/workflows/develtomain.yml b/.github/workflows/develtomain.yml index 11781c6..467bc3e 100644 --- a/.github/workflows/develtomain.yml +++ b/.github/workflows/develtomain.yml @@ -35,6 +35,6 @@ jobs: # Job ID job_id: 5f90ad90f9c74e6d1e606e33 # Variables - variables: '{ "gitrepo": "https://github.com/ansible-lockdown/RHEL9-CIS.git", "image": "ami-04483b15b4268d18d", "username": "centos" }' + variables: '{ "gitrepo": "https://github.com/ansible-lockdown/RHEL9-CIS.git", "image": "ami-0335e1660e1197d63", "username": "rocky" }' # Refactr API base URL api_url: # optional diff --git a/tasks/section_5/cis_5.4.x.yml b/tasks/section_5/cis_5.4.x.yml index 681db73..05ccefb 100644 --- a/tasks/section_5/cis_5.4.x.yml +++ b/tasks/section_5/cis_5.4.x.yml @@ -24,7 +24,7 @@ dest: /etc/pam.d/system-auth state: present regexp: '^password requisite pam_pwquality.so' - line: "password requisite pam_pwquality.so try_first_pass local_users_only enforce-for-root retry=3 remember={{ rhel9cis_pam_faillock.remember }}" + line: "password requisite pam_pwquality.so try_first_pass local_users_only enforce_for_root retry=3 remember={{ rhel9cis_pam_faillock.remember }}" insertbefore: '^#?password ?' when: - rhel9cis_rule_5_4_1 or @@ -35,7 +35,7 @@ dest: /etc/pam.d/password-auth state: present regexp: '^password requisite pam_pwquality.so' - line: "password requisite pam_pwquality.so try_first_pass local_users_only enforce-for-root retry=3" + line: "password requisite pam_pwquality.so try_first_pass local_users_only enforce_for_root retry=3" insertbefore: '^#?password ?' when: rhel9cis_rule_5_4_1