mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-24 22:23:06 +00:00
removed split filter allowing old ansible versions
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
98feeb1b01
commit
a759c38902
2 changed files with 7 additions and 2 deletions
|
|
@ -119,7 +119,7 @@
|
|||
ansible.builtin.user:
|
||||
name: "{{ item }}"
|
||||
groups: "{{ rhel9cis_sugroup | default('wheel') }}"
|
||||
loop: "{{ rhel9cis_sugroup_users | split (',') }}"
|
||||
loop: "{{ rhel9cis_sugroup_users }}"
|
||||
when:
|
||||
- rhel9cis_rule_5_3_7
|
||||
tags:
|
||||
|
|
|
|||
|
|
@ -194,6 +194,11 @@
|
|||
changed_when: false
|
||||
register: rhel9cis_6_2_8_root_paths
|
||||
|
||||
- name: "6.2.8 | AUDIT | Ensure root PATH Integrity | Get root paths"
|
||||
ansible.builtin.shell: sudo -Hiu root env | grep '^PATH' | cut -d= -f2 | tr ":" "\n"
|
||||
changed_when: false
|
||||
register: rhel9cis_6_2_8_root_paths_split
|
||||
|
||||
- name: "6.2.8 | AUDIT | Ensure root PATH Integrity | Set fact"
|
||||
ansible.builtin.set_fact:
|
||||
root_paths: "{{ rhel9cis_6_2_8_root_paths.stdout }}"
|
||||
|
|
@ -216,7 +221,7 @@
|
|||
ansible.builtin.stat:
|
||||
path: "{{ item }}"
|
||||
register: root_path_perms
|
||||
loop: "{{ rhel9cis_6_2_8_root_paths.stdout | split(':') }}"
|
||||
loop: "{{ rhel9cis_6_2_8_root_paths_split.stdout_lines }}"
|
||||
|
||||
- ansible.builtin.debug:
|
||||
msg: "{{ root_path_perms.results }}"
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue