ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-27 15:33:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

system_is_container updates

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-01-18 13:17:57 +00:00
parent 29c02f4c42
commit 9b6c06e930
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB
3 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
tasks/section_3/cis_3.4.1.1.yml
View file

@ -6,6 +6,7 @@
state: present state: present
when: when:
- rhel9cis_rule_3_4_1_1 - rhel9cis_rule_3_4_1_1
- not system_is_container
tags: tags:
- level1-server - level1-server
- level1-workstation - level1-workstation

2
tasks/section_4/cis_4.1.1.x.yml
View file

@ -29,7 +29,7 @@
when: when:
- not rhel9cis_skip_for_travis - not rhel9cis_skip_for_travis
- rhel9cis_rule_4_1_1_2 - rhel9cis_rule_4_1_1_2
- ansible_connection != 'docker' - not system_is_container
tags: tags:
- level2-server - level2-server
- level2-workstation - level2-workstation

2
tasks/section_4/main.yml
View file

@ -2,6 +2,8 @@
- name: "SECTION | 4.1| Configure System Accounting (auditd)" - name: "SECTION | 4.1| Configure System Accounting (auditd)"
include_tasks: cis_4.1.1.x.yml include_tasks: cis_4.1.1.x.yml
when:
- not system_is_container
- name: "SECTION | 4.1.2.x| Configure Data Retention" - name: "SECTION | 4.1.2.x| Configure Data Retention"
include_tasks: cis_4.1.2.x.yml include_tasks: cis_4.1.2.x.yml