PT #184 addressed thansk to @ipruteanu-sie

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2024-03-06 10:27:58 +00:00
parent 112cf5ae8c
commit 91b272baee
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
2 changed files with 0 additions and 25 deletions

View file

@ -1060,10 +1060,6 @@ rhel9cis_inactivelock:
# This variable specifies the number of days of inactivity before an account will be locked. # This variable specifies the number of days of inactivity before an account will be locked.
# CIS requires a value of 30 days or less. # CIS requires a value of 30 days or less.
lock_days: 30 lock_days: 30
# This variable governs if authconfig package should be installed. This package provides a simple method of
# configuring /etc/sysconfig/network to handle NIS, as well as /etc/passwd and /etc/shadow, the files used
# for shadow password support. Basic LDAP, Kerberos 5, and Winbind client configuration is also provided.
rhel9cis_use_authconfig: false
## Section 5.4 - Configure authselect: Custom authselect profile settings(name, profile to customize, options) ## Section 5.4 - Configure authselect: Custom authselect profile settings(name, profile to customize, options)
## Controls: ## Controls:

View file

@ -226,27 +226,6 @@
- level1_server - level1_server
- level1_workstation - level1_workstation
- name: "PRELIM | Install authconfig"
ansible.builtin.package:
name: authconfig
state: present
become: true
when:
- rhel9cis_use_authconfig
- rhel9cis_rule_5_3_1 or
rhel9cis_rule_5_3_2 or
rhel9cis_rule_5_3_3 or
'"authconfig" not in ansible_facts.packages or
"auditd-lib" not in ansible_facts.packages'
tags:
- level1-server
- level1-workstation
- rule_5.3.1 or
rule_5.3.2 or
rule_5.3.3
- authconfig
- auditd
- name: "PRELIM | 5.3.4 | Find all sudoers files." - name: "PRELIM | 5.3.4 | Find all sudoers files."
ansible.builtin.shell: "find /etc/sudoers /etc/sudoers.d/ -type f ! -name '*~' ! -name '*.*'" ansible.builtin.shell: "find /etc/sudoers /etc/sudoers.d/ -type f ! -name '*~' ! -name '*.*'"
changed_when: false changed_when: false