mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-24 14:23:05 +00:00
Fix for #384, thank you @polski-g
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
This commit is contained in:
parent
de7555aa10
commit
b0ec6c4820
4 changed files with 4 additions and 3 deletions
|
|
@ -1,6 +1,7 @@
|
|||
# Changes to rhel9CIS
|
||||
|
||||
## 2.0.3 - Based on CIS v2.0.0
|
||||
- addressed issue #384 thank you @polski-g
|
||||
- update command to shell module on tasks
|
||||
- addressed issue 371 thanks to @bgro and kodebach
|
||||
- addressed issue 350 thanks to @chrispipo
|
||||
|
|
|
|||
|
|
@ -618,7 +618,7 @@ rhel9cis_warning_banner: Authorized users only. All activity may be monitored an
|
|||
|
||||
## Control 1.8.x - Settings for GDM
|
||||
# do not run Control 1.8.x if using a display manager different than gdm
|
||||
rhel10cis_display_manager: "gdm"
|
||||
rhel9cis_display_manager: "gdm"
|
||||
# This variable governs whether rules dealing with GUI specific packages(and/or their settings) should
|
||||
# be executed either to:
|
||||
# - secure GDM, if GUI is needed('rhel9cis_gui: true')
|
||||
|
|
|
|||
|
|
@ -97,7 +97,7 @@
|
|||
(
|
||||
((prelim_ansible_user_password_set.stdout | length != 0) and (prelim_ansible_user_password_set.stdout != "!!" ))
|
||||
or
|
||||
(ansible_env.SUDO_USER in rhel10cis_sudoers_exclude_nopasswd_list)
|
||||
(ansible_env.SUDO_USER in rhel9cis_sudoers_exclude_nopasswd_list)
|
||||
)
|
||||
fail_msg: "You have {{ sudo_password_rule }} enabled but the user = {{ ansible_env.SUDO_USER }} has no password set or or the user is not included in the exception list for rule 5.2.4 - It can break access"
|
||||
success_msg: "You have a password set for the {{ ansible_env.SUDO_USER }} user or the user is included in the exception list for rule 5.2.4"
|
||||
|
|
|
|||
|
|
@ -61,6 +61,6 @@
|
|||
file: cis_1.7.x.yml
|
||||
|
||||
- name: "SECTION | 1.8 | Gnome Display Manager"
|
||||
when: rhel10cis_display_manager == 'gdm'
|
||||
when: rhel9cis_display_manager == 'gdm'
|
||||
ansible.builtin.import_tasks:
|
||||
file: cis_1.8.x.yml
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue