ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-24 14:23:05 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

- Added extra checks in using loop items in when statement

Browse source 
- Fixed typo in handler name

Signed-off-by: Marco V <marco@osp.nl>
This commit is contained in:
c59099 2023-07-19 17:30:54 +02:00 • committed by Marco V
parent 9709779492
commit 9e8ecee964
No known key found for this signature in database
GPG key ID: 9DF01339F71C5EBC
2 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tasks/section_1/cis_1.10.yml
View file

@ -10,7 +10,7 @@
ansible.builtin.shell: |
update-crypto-policies --set "{{ rhel9cis_full_crypto_policy }}"
update-crypto-policies
notify: change_requires_reboot
notify: Change_requires_reboot
when:
- rhel9cis_system_wide_crypto_policy.stdout != rhel9cis_full_crypto_policy
when:

8
tasks/section_6/cis_6.1.x.yml
View file

@ -164,7 +164,7 @@
ansible.builtin.set_fact:
rhel_09_6_1_10_unowned_files_found: true
loop: "{{ rhel_09_6_1_10_audit.results }}"
when: item.stdout | length > 0
when: item | length > 0 and item.stdout is defined and item.stdout | length > 0
- name: "6.1.10 | AUDIT | Ensure no unowned files or directories exist | Displaying any unowned files or directories"
ansible.builtin.debug:
@ -205,7 +205,7 @@
ansible.builtin.set_fact:
rhel_09_6_1_11_ungrouped_files_found: true
loop: "{{ rhel_09_6_1_11_audit.results }}"
when: item.stdout | length > 0
when: item | length > 0 and item.stdout is defined and item.stdout | length > 0
- name: "6.1.11 | AUDIT | Ensure no ungrouped files or directories exist | Displaying all ungrouped files or directories"
ansible.builtin.debug:
@ -258,7 +258,7 @@
ansible.builtin.set_fact:
rhel9_6_1_13_suid_found: true
loop: "{{ rhel_09_6_1_13_suid_perms.results }}"
when: item.stdout | length > 0
when: item | length > 0 and item.stdout is defined and item.stdout | length > 0
- name: "6.1.13 | AUDIT | Audit SUID executables | Alert SUID executables exist"
ansible.builtin.debug:
@ -297,7 +297,7 @@
ansible.builtin.set_fact:
rhel9_6_1_14_sgid_found: true
loop: "{{ rhel_09_6_1_14_sgid_perms.results }}"
when: item.stdout | length > 0
when: item | length > 0 and item.stdout is defined and item.stdout | length > 0
- name: "6.1.14 | AUDIT | Audit SGID executables | Alert SGID executables exist"
ansible.builtin.debug: