ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-27 15:33:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

updated tags

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-02-01 17:53:09 +00:00
parent aa8bcecbc7
commit ad6c88b7f9
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB
6 changed files with 37 additions and 34 deletions
Download patch file Download diff file Expand all files Collapse all files

20
tasks/section_3/main.yml
View file

@ -1,41 +1,41 @@
---
- name: "SECTION | 3.1.x | Packet and IP redirection"
include_tasks: cis_3.1.x.yml
import_tasks: cis_3.1.x.yml
- name: "SECTION | 3.2.x | Network Parameters (Host Only)"
include_tasks: cis_3.2.x.yml
import_tasks: cis_3.2.x.yml
- name: "SECTION | 3.3.x | Uncommon Network Protocols"
include_tasks: cis_3.3.x.yml
import_tasks: cis_3.3.x.yml
- name: "SECTION | 3.4.1.x | firewall defined"
include_tasks: cis_3.4.1.1.yml
import_tasks: cis_3.4.1.1.yml
- name: "SECTION | 3.4.2.x | firewalld firewall"
import_tasks: cis_3.4.2.x.yml
include_tasks: cis_3.4.2.x.yml
when:
- rhel9cis_firewall == "firewalld"
- name: "SECTION | 3.4.3.x | Configure nftables firewall"
import_tasks: cis_3.4.3.x.yml
include_tasks: cis_3.4.3.x.yml
when:
- rhel9cis_firewall == "nftables"
- name: "SECTION | 3.4.4.1.x | Configure iptables IPv4"
import_tasks: cis_3.4.4.1.x.yml
include_tasks: cis_3.4.4.1.x.yml
when:
- rhel9cis_firewall == "iptables"
- name: "SECTION | 3.4.4.2.x | Configure iptables IPv6"
import_tasks: cis_3.4.4.2.x.yml
include_tasks: cis_3.4.4.2.x.yml
when:
- ( rhel9cis_firewall == "iptables" and rhel9cis_ipv6_required )
- name: "SECTION | 3.5 | Configure wireless"
include_tasks: cis_3.5.yml
import_tasks: cis_3.5.yml
- name: "SECTION | 3.5 | disable IPv6"
import_tasks: cis_3.5.yml
include_tasks: cis_3.5.yml
when:
- not rhel9cis_ipv6_required