ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-24 14:23:05 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

#66 5.6.5 regex improvment

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-06-28 10:49:55 +01:00
parent 4004b1b4c3
commit ddec58c419
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tasks/section_5/cis_5.6.x.yml
View file

@ -100,7 +100,7 @@
- name: "5.6.5 | PATCH | Ensure default user umask is 027 or more restrictive | Set umask for /etc/profile"
ansible.builtin.replace:
path: /etc/profile
regexp: '^(?i)(\s+UMASK|UMASK)\s0[0-2][0-6]'
regexp: '(?i)(umask)\s0[0-2][0-6]'
replace: '\1 027'
when:
- rhel9cis_rule_5_6_5