ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-27 07:23:07 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

cis_v1.0.0 alignment updated

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-01-19 10:07:14 +00:00
parent 32805d6497
commit b8085e5dc0
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
7 changed files with 17 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

8
tasks/section_1/cis_1.1.x.yml
View file

@ -16,6 +16,14 @@
ansible.builtin.modprobe:
name: usb-storage
state: absent
- name: "1.1.9 | PATCH | Disable USB Storage | blacklist"
lineinfile:
path: /etc/modprobe.d/blacklist.conf
regexp: "^(#)?blacklist usb-storage(\\s|$)"
line: "blacklist usb-storage"
create: true
mode: 0600
when:
- rhel9cis_rule_1_1_9
tags: