mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-24 22:23:06 +00:00
audit binaries variables
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
2827c752ac
commit
c5278da4e5
1 changed files with 3 additions and 21 deletions
|
|
@ -105,13 +105,7 @@
|
|||
ansible.builtin.file:
|
||||
path: "{{ item }}"
|
||||
mode: 'go-w'
|
||||
loop:
|
||||
- /sbin/auditctl
|
||||
- /sbin/aureport
|
||||
- /sbin/ausearch
|
||||
- /sbin/autrace
|
||||
- /sbin/auditd
|
||||
- /sbin/augenrules
|
||||
loop: "{{ audit_bins }}"
|
||||
|
||||
- name: "6.3.4.9 | PATCH | Ensure audit tools owner is configured"
|
||||
when:
|
||||
|
|
@ -126,13 +120,7 @@
|
|||
path: "{{ item }}"
|
||||
owner: root
|
||||
group: root
|
||||
loop:
|
||||
- /sbin/auditctl
|
||||
- /sbin/aureport
|
||||
- /sbin/ausearch
|
||||
- /sbin/autrace
|
||||
- /sbin/auditd
|
||||
- /sbin/augenrules
|
||||
loop: "{{ audit_bins }}"
|
||||
|
||||
- name: "6.3.4.10 | PATCH | Ensure audit tools group owner is configured"
|
||||
when:
|
||||
|
|
@ -147,10 +135,4 @@
|
|||
ansible.builtin.file:
|
||||
path: "{{ item }}"
|
||||
group: root
|
||||
loop:
|
||||
- /sbin/auditctl
|
||||
- /sbin/aureport
|
||||
- /sbin/ausearch
|
||||
- /sbin/autrace
|
||||
- /sbin/auditd
|
||||
- /sbin/augenrules
|
||||
loop: "{{ audit_bins }}"
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue