forked from ansible-lockdown/RHEL9-CIS
97 lines
2 KiB
YAML
97 lines
2 KiB
YAML
|
---
|
||
|
|
|
||
|
|
- name: "1.8.1.1 | L1 | PATCH | Ensure message of the day is configured properly"
|
||
|
|
template:
|
||
|
|
src: etc/motd.j2
|
||
|
|
dest: /etc/motd
|
||
|
|
owner: root
|
||
|
|
group: root
|
||
|
|
mode: 0644
|
||
|
|
when:
|
||
|
|
- rhel9cis_rule_1_8_1_1
|
||
|
|
tags:
|
||
|
|
- level1-server
|
||
|
|
- level1-workstation
|
||
|
|
- banner
|
||
|
|
- patch
|
||
|
|
- rule_1.8.1.1
|
||
|
|
|
||
|
|
- name: "1.8.1.2 | L1 | PATCH | Ensure local login warning banner is configured properly"
|
||
|
|
template:
|
||
|
|
src: etc/issue.j2
|
||
|
|
dest: /etc/issue
|
||
|
|
owner: root
|
||
|
|
group: root
|
||
|
|
mode: 0644
|
||
|
|
when:
|
||
|
|
- rhel9cis_rule_1_8_1_2
|
||
|
|
tags:
|
||
|
|
- level1-server
|
||
|
|
- level1-workstation
|
||
|
|
- patch
|
||
|
|
- rule_1.8.1.2
|
||
|
|
|
||
|
|
- name: "1.8.1.3 | L1 | PATCH | Ensure remote login warning banner is configured properly"
|
||
|
|
template:
|
||
|
|
src: etc/issue.net.j2
|
||
|
|
dest: /etc/issue.net
|
||
|
|
owner: root
|
||
|
|
group: root
|
||
|
|
mode: 0644
|
||
|
|
when:
|
||
|
|
- rhel9cis_rule_1_8_1_3
|
||
|
|
tags:
|
||
|
|
- level1-server
|
||
|
|
- level1-workstation
|
||
|
|
- banner
|
||
|
|
- patch
|
||
|
|
- rule_1.8.1.3
|
||
|
|
|
||
|
|
- name: "1.8.1.4 | L1 | PATCH | Ensure permissions on /etc/motd are configured"
|
||
|
|
file:
|
||
|
|
dest: /etc/motd
|
||
|
|
state: file
|
||
|
|
owner: root
|
||
|
|
group: root
|
||
|
|
mode: 0644
|
||
|
|
when:
|
||
|
|
- rhel9cis_rule_1_8_1_4
|
||
|
|
tags:
|
||
|
|
- level1-server
|
||
|
|
- level1-workstation
|
||
|
|
- perms
|
||
|
|
- patch
|
||
|
|
- rule_1.8.1.4
|
||
|
|
|
||
|
|
- name: "1.8.1.5 | L1 | PATCH | Ensure permissions on /etc/issue are configured"
|
||
|
|
file:
|
||
|
|
dest: /etc/issue
|
||
|
|
state: file
|
||
|
|
owner: root
|
||
|
|
group: root
|
||
|
|
mode: 0644
|
||
|
|
when:
|
||
|
|
- rhel9cis_rule_1_8_1_5
|
||
|
|
tags:
|
||
|
|
- level1-server
|
||
|
|
- level1-workstation
|
||
|
|
- perms
|
||
|
|
- patch
|
||
|
|
- rule_1.8.1.5
|
||
|
|
|
||
|
|
- name: "1.8.1.6 | L1 | PATCH | Ensure permissions on /etc/issue.net are configured"
|
||
|
|
file:
|
||
|
|
dest: /etc/issue.net
|
||
|
|
state: file
|
||
|
|
owner: root
|
||
|
|
group: root
|
||
|
|
mode: 0644
|
||
|
|
when:
|
||
|
|
- rhel9cis_rule_1_8_1_6
|
||
|
|
tags:
|
||
|
|
- level1-server
|
||
|
|
- level1-workstation
|
||
|
|
- perms
|
||
|
|
- patch
|
||
|
|
- rule_1.8.1.6
|