section1 v2 initial

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

tasks/section_1/cis_1.7.x.yml

@@ -1,93 +1,93 @@
 ---
 
 - name: "1.7.1 | PATCH | Ensure message of the day is configured properly"
-  ansible.builtin.template:
-      src: etc/motd.j2
-      dest: /etc/motd
-      owner: root
-      group: root
-      mode: '0644'
   when:
-      - rhel9cis_rule_1_7_1
+    - rhel9cis_rule_1_7_1
   tags:
-      - level1-server
-      - level1-workstation
-      - banner
-      - patch
-      - rule_1.7.1
+    - level1-server
+    - level1-workstation
+    - banner
+    - patch
+    - rule_1.7.1
+  ansible.builtin.template:
+    src: etc/motd.j2
+    dest: /etc/motd
+    owner: root
+    group: root
+    mode: u-x,go-wx
 
 - name: "1.7.2 | PATCH | Ensure local login warning banner is configured properly"
-  ansible.builtin.template:
-      src: etc/issue.j2
-      dest: /etc/issue
-      owner: root
-      group: root
-      mode: '0644'
   when:
-      - rhel9cis_rule_1_7_2
+    - rhel9cis_rule_1_7_2
   tags:
-      - level1-server
-      - level1-workstation
-      - patch
-      - rule_1.7.2
+    - level1-server
+    - level1-workstation
+    - patch
+    - rule_1.7.2
+  ansible.builtin.template:
+    src: etc/issue.j2
+    dest: /etc/issue
+    owner: root
+    group: root
+    mode: '0644'
 
 - name: "1.7.3 | PATCH | Ensure remote login warning banner is configured properly"
-  ansible.builtin.template:
-      src: etc/issue.net.j2
-      dest: /etc/issue.net
-      owner: root
-      group: root
-      mode: '0644'
   when:
-      - rhel9cis_rule_1_7_3
+    - rhel9cis_rule_1_7_3
   tags:
-      - level1-server
-      - level1-workstation
-      - banner
-      - patch
-      - rule_1.7.3
+    - level1-server
+    - level1-workstation
+    - banner
+    - patch
+    - rule_1.7.3
+  ansible.builtin.template:
+    src: etc/issue.net.j2
+    dest: /etc/issue.net
+    owner: root
+    group: root
+    mode: '0644'
 
 - name: "1.7.4 | PATCH | Ensure permissions on /etc/motd are configured"
-  ansible.builtin.file:
-      path: /etc/motd
-      owner: root
-      group: root
-      mode: '0644'
   when:
-      - rhel9cis_rule_1_7_4
+    - rhel9cis_rule_1_7_4
   tags:
-      - level1-server
-      - level1-workstation
-      - perms
-      - patch
-      - rule_1.7.4
+    - level1-server
+    - level1-workstation
+    - perms
+    - patch
+    - rule_1.7.4
+  ansible.builtin.file:
+    path: /etc/motd
+    owner: root
+    group: root
+    mode: '0644'
 
 - name: "1.7.5 | PATCH | Ensure permissions on /etc/issue are configured"
-  ansible.builtin.file:
-      path: /etc/issue
-      owner: root
-      group: root
-      mode: '0644'
   when:
-      - rhel9cis_rule_1_7_5
+    - rhel9cis_rule_1_7_5
   tags:
-      - level1-server
-      - level1-workstation
-      - perms
-      - patch
-      - rule_1.7.5
+    - level1-server
+    - level1-workstation
+    - perms
+    - patch
+    - rule_1.7.5
+  ansible.builtin.file:
+    path: /etc/issue
+    owner: root
+    group: root
+    mode: '0644'
 
 - name: "1.7.6 | PATCH | Ensure permissions on /etc/issue.net are configured"
-  ansible.builtin.file:
-      path: /etc/issue.net
-      owner: root
-      group: root
-      mode: '0644'
   when:
-      - rhel9cis_rule_1_7_6
+    - rhel9cis_rule_1_7_6
   tags:
-      - level1-server
-      - level1-workstation
-      - perms
-      - patch
-      - rule_1.7.6
+    - level1-server
+    - level1-workstation
+    - perms
+    - patch
+    - rule_1.7.6
+  ansible.builtin.file:
+    path: /etc/issue.net
+    owner: root
+    group: root
+    mode: '0644'