diff --git a/tasks/section_5/cis_5.3.x.yml b/tasks/section_5/cis_5.3.x.yml index 2f63b23..c8fd58c 100644 --- a/tasks/section_5/cis_5.3.x.yml +++ b/tasks/section_5/cis_5.3.x.yml @@ -42,21 +42,21 @@ - sudo - rule_5.3.3 -- name: "5.3.4 | PATCH | Ensure users must provide password for escalation" - ansible.builtin.replace: - path: "{{ item }}" - regexp: '^([^#|{% if system_is_ec2 %}ec2-user{% endif %}].*)NOPASSWD(.*)' - replace: '\1PASSWD\2' - validate: '/usr/sbin/visudo -cf %s' - loop: "{{ rhel9cis_sudoers_files.stdout_lines }}" - when: - - rhel9cis_rule_5_3_4 - tags: - - level2-server - - level2-workstation - - patch - - sudo - - rule_5.3.4 +#- name: "5.3.4 | PATCH | Ensure users must provide password for escalation" +# ansible.builtin.replace: +# path: "{{ item }}" +# regexp: '^([^#|{% if system_is_ec2 %}ec2-user{% endif %}].*)NOPASSWD(.*)' +# replace: '\1PASSWD\2' +# validate: '/usr/sbin/visudo -cf %s' +# loop: "{{ rhel9cis_sudoers_files.stdout_lines }}" +# when: +# - rhel9cis_rule_5_3_4 +# tags: +# - level2-server +# - level2-workstation +# - patch +# - sudo +# - rule_5.3.4 - name: "5.3.5 | PATCH | Ensure re-authentication for privilege escalation is not disabled globally" ansible.builtin.replace: