mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-24 22:23:06 +00:00
Update Changelog with fixes
Signed-off-by: Frederick Witty <frederickw@mindpointgroup.com>
This commit is contained in:
parent
39c7dfa187
commit
de7555aa10
4 changed files with 12 additions and 17 deletions
|
|
@ -167,6 +167,7 @@
|
|||
current_crypto_module: "{{ prelim_system_wide_crypto_policy.stdout.split(':')[1] }}"
|
||||
|
||||
- name: "PRELIM | AUDIT | Set facts based on boot type"
|
||||
tags: always
|
||||
block:
|
||||
- name: "PRELIM | AUDIT | Check whether machine is UEFI-based"
|
||||
ansible.builtin.stat:
|
||||
|
|
@ -185,17 +186,14 @@
|
|||
grub2_path: /etc/grub2-efi.cfg
|
||||
|
||||
- name: "PRELIM | AUDIT | Discover Gnome Desktop Environment"
|
||||
tags:
|
||||
- always
|
||||
tags: always
|
||||
ansible.builtin.stat:
|
||||
path: /usr/share/gnome/gnome-version.xml
|
||||
register: prelim_gnome_present
|
||||
|
||||
- name: "PRELIM | PATCH | Install dconf if gui installed"
|
||||
when:
|
||||
- rhel9cis_gui
|
||||
tags:
|
||||
- always
|
||||
when: rhel9cis_gui
|
||||
tags: always
|
||||
ansible.builtin.package:
|
||||
name: dconf
|
||||
state: present
|
||||
|
|
@ -204,8 +202,7 @@
|
|||
when:
|
||||
- rhel9cis_rule_3_1_2
|
||||
- not system_is_container
|
||||
tags:
|
||||
- always
|
||||
tags: always
|
||||
block:
|
||||
- name: "PRELIM | AUDIT | Discover is wireless adapter on system"
|
||||
ansible.builtin.command: find /sys/class/net/*/ -type d -name wireless
|
||||
|
|
@ -251,9 +248,7 @@
|
|||
state: touch
|
||||
|
||||
- name: "PRELIM | PATCH | sshd_config.d/50-redhat.conf exists"
|
||||
when:
|
||||
- rhel9cis_rule_5_1_10 or
|
||||
rhel9cis_rule_5_1_11
|
||||
when: rhel9cis_rule_5_1_10 or rhel9cis_rule_5_1_11
|
||||
ansible.builtin.stat:
|
||||
path: /etc/ssh/sshd_config.d/50-redhat.conf
|
||||
register: prelim_sshd_50_redhat_file
|
||||
|
|
@ -361,7 +356,6 @@
|
|||
prelim_max_int_uid: "{{ prelim_uid_max_id.stdout | default(max_int_uid) }}"
|
||||
|
||||
- name: "PRELIM | AUDIT | Gather the package facts after prelim"
|
||||
tags:
|
||||
- always
|
||||
tags: always
|
||||
ansible.builtin.package_facts:
|
||||
manager: auto
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue