ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-27 15:33:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Updated mountpoint vars correctly

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2024-12-11 10:09:31 +00:00
parent 7875e1f6b5
commit d850fc5875
No known key found for this signature in database
GPG key ID: 997FF7FE93AEB5B9
8 changed files with 58 additions and 58 deletions
Download patch file Download diff file Expand all files Collapse all files

14
tasks/section_1/cis_1.1.2.6.x.yml
View file

@ -3,7 +3,7 @@
- name: "1/.1 | PATCH | Ensure /var/log is a separate partition"
when:
- rhel9cis_rule_1_1_2_6_1
- required_mount not in mount_names
- required_mount not in prelim_mount_names
tags:
- level1-server
- level1-workstation
@ -33,7 +33,7 @@
- name: "1.1.2.6.2 | PATCH | Ensure nodev option set on /var/log partition"
when:
- mount_point_fs_and_options[mount_point] is defined
- prelim_mount_point_fs_and_options[mount_point] is defined
- rhel9cis_rule_1_1_2_6_2
tags:
- level1-server
@ -49,14 +49,14 @@
notify: &mount_option_notify
- "Remount {{ mount_point }}"
ansible.builtin.set_fact: &mount_option_set_fact
mount_point_fs_and_options: |
{{ mount_point_fs_and_options | combine({mount_point: {'options': (mount_point_fs_and_options[mount_point]['options'] + [required_option])}}, recursive=True) }}
prelim_mount_point_fs_and_options: |
{{ prelim_mount_point_fs_and_options | combine({mount_point: {'options': (prelim_mount_point_fs_and_options[mount_point]['options'] + [required_option])}}, recursive=True) }}
changed_when: &mount_option_changed_when
- required_option not in mount_point_fs_and_options[mount_point]['original_options']
- required_option not in prelim_mount_point_fs_and_options[mount_point]['original_options']
- name: "1.1.2.6.3 | PATCH | Ensure nosuid option set on /var/log partition"
when:
- mount_point_fs_and_options[mount_point] is defined
- prelim_mount_point_fs_and_options[mount_point] is defined
- rhel9cis_rule_1_1_2_6_3
tags:
- level1-server
@ -76,7 +76,7 @@
- name: "1.1.2.6.4 | PATCH | Ensure noexec option set on /var/log partition"
when:
- mount_point_fs_and_options[mount_point] is defined
- prelim_mount_point_fs_and_options[mount_point] is defined
- rhel9cis_rule_1_1_2_6_4
tags:
- level1-server