ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-27 15:33:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

4Upstream: Adjusting strings used for user-shells conditionals

Browse source 
Signed-off-by: Pruteanu <ionut.pruteanu@siemens.com>
This commit is contained in:
Pruteanu 2024-03-11 17:26:49 +02:00
parent 504c553224
commit f3be71b20b
No known key found for this signature in database
GPG key ID: 8665D673971C2D62
1 changed files with 6 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

10
tasks/section_5/cis_5.6.x.yml
View file

@ -14,8 +14,9 @@
- item.id != "halt"
- item.id != "nfsnobody"
- item.uid < min_int_uid | int
- item.shell != " /bin/false"
- item.shell != " /usr/sbin/nologin"
- item.shell != "/bin/false"
- item.shell != "/usr/sbin/nologin"
- item.shell != "/sbin/nologin"
loop_control:
label: "{{ item.id }}"
@ -31,8 +32,9 @@
- item.id != "root"
- item.id != "nfsnobody"
- item.uid < min_int_uid | int
- item.shell != " /bin/false"
- item.shell != " /usr/sbin/nologin"
- item.shell != "/bin/false"
- item.shell != "/usr/sbin/nologin"
- item.shell != "/sbin/nologin"
loop_control:
label: "{{ item.id }}"
when: