ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-24 22:23:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Fix for #384, thank you @polski-g

Browse source 
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
This commit is contained in:
Frederick Witty 2025-09-05 16:24:11 -04:00
parent de7555aa10
commit b0ec6c4820
No known key found for this signature in database
GPG key ID: D29987C25A47D813
4 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
Changelog.md
View file

@ -1,6 +1,7 @@
# Changes to rhel9CIS # Changes to rhel9CIS
## 2.0.3 - Based on CIS v2.0.0 ## 2.0.3 - Based on CIS v2.0.0
- addressed issue #384 thank you @polski-g
- update command to shell module on tasks - update command to shell module on tasks
- addressed issue 371 thanks to @bgro and kodebach - addressed issue 371 thanks to @bgro and kodebach
- addressed issue 350 thanks to @chrispipo - addressed issue 350 thanks to @chrispipo

2
defaults/main.yml
View file

@ -618,7 +618,7 @@ rhel9cis_warning_banner: Authorized users only. All activity may be monitored an
## Control 1.8.x - Settings for GDM ## Control 1.8.x - Settings for GDM
# do not run Control 1.8.x if using a display manager different than gdm # do not run Control 1.8.x if using a display manager different than gdm
rhel10cis_display_manager: "gdm" rhel9cis_display_manager: "gdm"
# This variable governs whether rules dealing with GUI specific packages(and/or their settings) should # This variable governs whether rules dealing with GUI specific packages(and/or their settings) should
# be executed either to: # be executed either to:
# - secure GDM, if GUI is needed('rhel9cis_gui: true') # - secure GDM, if GUI is needed('rhel9cis_gui: true')

2
tasks/main.yml
View file

@ -97,7 +97,7 @@
( (
((prelim_ansible_user_password_set.stdout | length != 0) and (prelim_ansible_user_password_set.stdout != "!!" )) ((prelim_ansible_user_password_set.stdout | length != 0) and (prelim_ansible_user_password_set.stdout != "!!" ))
or or
(ansible_env.SUDO_USER in rhel10cis_sudoers_exclude_nopasswd_list) (ansible_env.SUDO_USER in rhel9cis_sudoers_exclude_nopasswd_list)
) )
fail_msg: "You have {{ sudo_password_rule }} enabled but the user = {{ ansible_env.SUDO_USER }} has no password set or or the user is not included in the exception list for rule 5.2.4 - It can break access" fail_msg: "You have {{ sudo_password_rule }} enabled but the user = {{ ansible_env.SUDO_USER }} has no password set or or the user is not included in the exception list for rule 5.2.4 - It can break access"
success_msg: "You have a password set for the {{ ansible_env.SUDO_USER }} user or the user is included in the exception list for rule 5.2.4" success_msg: "You have a password set for the {{ ansible_env.SUDO_USER }} user or the user is included in the exception list for rule 5.2.4"

2
tasks/section_1/main.yml
View file

@ -61,6 +61,6 @@
file: cis_1.7.x.yml file: cis_1.7.x.yml
- name: "SECTION | 1.8 | Gnome Display Manager" - name: "SECTION | 1.8 | Gnome Display Manager"
when: rhel10cis_display_manager == 'gdm' when: rhel9cis_display_manager == 'gdm'
ansible.builtin.import_tasks: ansible.builtin.import_tasks:
file: cis_1.8.x.yml file: cis_1.8.x.yml