forked from ansible-lockdown/RHEL9-CIS
62 lines
1.4 KiB
YAML
62 lines
1.4 KiB
YAML
|
---
|
||
|
|
|
||
|
|
- name: "3.3.1 | L2 | PATCH | Ensure DCCP is disabled"
|
||
|
|
lineinfile:
|
||
|
|
dest: /etc/modprobe.d/CIS.conf
|
||
|
|
regexp: "^(#)?install dccp(\\s|$)"
|
||
|
|
line: "install dccp /bin/true"
|
||
|
|
create: yes
|
||
|
|
mode: 0600
|
||
|
|
when:
|
||
|
|
- rhel9cis_rule_3_3_1
|
||
|
|
tags:
|
||
|
|
- level2-server
|
||
|
|
- level2-workstation
|
||
|
|
- patch
|
||
|
|
- rule_3.3.1
|
||
|
|
|
||
|
|
- name: "3.3.2 | L2 | PATCH | Ensure SCTP is disabled"
|
||
|
|
lineinfile:
|
||
|
|
dest: /etc/modprobe.d/CIS.conf
|
||
|
|
regexp: "^(#)?install sctp(\\s|$)"
|
||
|
|
line: "install sctp /bin/true"
|
||
|
|
create: yes
|
||
|
|
mode: 0600
|
||
|
|
when:
|
||
|
|
- rhel9cis_rule_3_3_2
|
||
|
|
tags:
|
||
|
|
- level2-server
|
||
|
|
- level2-workstation
|
||
|
|
- patch
|
||
|
|
- rule_3.3.2
|
||
|
|
|
||
|
|
- name: "3.3.3 | L2 | PATCH | Ensure RDS is disabled"
|
||
|
|
lineinfile:
|
||
|
|
dest: /etc/modprobe.d/CIS.conf
|
||
|
|
regexp: "^(#)?install rds(\\s|$)"
|
||
|
|
line: "install rds /bin/true"
|
||
|
|
create: yes
|
||
|
|
mode: 0600
|
||
|
|
when:
|
||
|
|
- rhel9cis_rule_3_3_3
|
||
|
|
tags:
|
||
|
|
- level2-server
|
||
|
|
- level2-workstation
|
||
|
|
- patch
|
||
|
|
- rule_3.3.3
|
||
|
|
|
||
|
|
- name: "3.3.4 | L2 | PATCH | Ensure TIPC is disabled"
|
||
|
|
lineinfile:
|
||
|
|
dest: /etc/modprobe.d/CIS.conf
|
||
|
|
regexp: "^(#)?install tipc(\\s|$)"
|
||
|
|
line: "install tipc /bin/true"
|
||
|
|
create: yes
|
||
|
|
mode: 0600
|
||
|
|
when:
|
||
|
|
- rhel9cis_rule_3_3_4
|
||
|
|
tags:
|
||
|
|
- level2-server
|
||
|
|
- level2-workstation
|
||
|
|
- patch
|
||
|
|
- rule_3.3.4
|