From 8319a028d8cf15e5ef4ccfe7d4e57d52448731c8 Mon Sep 17 00:00:00 2001 From: "root@DERVISHx" Date: Mon, 16 Oct 2023 14:51:34 +0100 Subject: [PATCH] Fix sintax Error on cis_5.2.x.yml Signed-off-by: root@DERVISHx --- tasks/section_5/cis_5.2.x.yml | 2 +- tasks/section_5/cis_5.6.x.yml | 3 +-- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/tasks/section_5/cis_5.2.x.yml b/tasks/section_5/cis_5.2.x.yml index 9054afd..a5d8291 100644 --- a/tasks/section_5/cis_5.2.x.yml +++ b/tasks/section_5/cis_5.2.x.yml @@ -361,7 +361,7 @@ - name: "5.2.20 | PATCH | Ensure SSH Idle Timeout Interval is configured | Ensure SSH ClientAliveCountMax set to <= 3" ansible.builtin.lineinfile: path: "{{ rhel9_cis_sshd_config_file }}" - regexp: '^ClientAliveCountMax' + regexp: '^ClientAliveCountMax|^#ClientAliveCountMax' line: "ClientAliveCountMax {{ rhel9cis_sshd['clientalivecountmax'] }}" validate: sshd -t -f %s when: diff --git a/tasks/section_5/cis_5.6.x.yml b/tasks/section_5/cis_5.6.x.yml index 15f1a78..909d3af 100644 --- a/tasks/section_5/cis_5.6.x.yml +++ b/tasks/section_5/cis_5.6.x.yml @@ -98,12 +98,11 @@ regexp: '^USERGROUPS_ENAB' line: USERGROUPS_ENAB no - - name: "5.6.5 | PATCH | Ensure default user umask is 027 or more restrictive | Force umask sessions /etc/pam.d/system-auth" + - name: "5.6.5 | PATCH | Ensure default user umask is 027 or more restrictive | Force umask sessions /etc/pam.d/system-auth" ansible.builtin.lineinfile: path: /etc/pam.d/system-auth line: 'session required pam_umask.so' insertafter: EOF - when: - rhel9cis_rule_5_6_5 tags: