ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-24 22:23:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

lint

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-01-26 12:10:10 +00:00
parent e61ef2c1a6
commit e59e72e3d1
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
2 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
tasks/section_3/cis_3.1.x.yml
View file

@ -63,8 +63,8 @@
owner: root
group: root
loop:
- tipc
# note the item used in the template
- tipc
# note the item used in the template
- name: "3.1.3 | PATCH | Ensure TIPC is disabled | blacklist"
ansible.builtin.lineinfile:

8
tasks/section_3/cis_3.4.1.x.yml
View file

@ -22,7 +22,7 @@
name: "{{ item }}"
masked: true
loop:
- firewalld
- firewalld
when:
- item in ansible_facts.packages
- rhel9cis_firewall == 'nftables'
@ -32,15 +32,15 @@
name: "{{ item }}"
masked: true
loop:
- nftables
- nftables
when:
- item in ansible_facts.packages
- rhel9cis_firewall == 'firewalld'
- name: "3.4.1.2 | PATCH | Ensure a single firewall configuration utility is in use | package installed"
ansible.builtin.package:
name: "{{ rhel9cis_firewall }}"
state: installed
name: "{{ rhel9cis_firewall }}"
state: installed
- name: "3.4.1.2 | PATCH | Ensure a single firewall configuration utility is in use | {{ rhel9cis_firewall }} started and enabled"
ansible.builtin.systemd: