RHEL9-CIS/tasks/section_5/main.yml

---

# Access, Authentication, and Authorization

- name: "SECTION | 5.1 | Configure time-based job schedulers"
  ansible.builtin.import_tasks:
      file: cis_5.1.x.yml

- name: "SECTION | 5.2 | Configure SSH Server"
  ansible.builtin.import_tasks:
      file: cis_5.2.x.yml
  when:
      - "'openssh-server' in ansible_facts.packages"

- name: "SECTION | 5.3 | Configure privilege escalation"
  ansible.builtin.import_tasks:
      file: cis_5.3.x.yml

- name: "SECTION | 5.4 | Configure authselect"
  ansible.builtin.import_tasks:
      file: cis_5.4.x.yml

- name: "SECTION | 5.5 | Configure PAM | not authselect"
  ansible.builtin.import_tasks:
      file: cis_5.5.x.yml
  when: not rhel9cis_authselect_custom_profile_select

- name: "SECTION | 5.5 | Configure PAM | authselect"
  ansible.builtin.import_tasks:
      file: cis_5.5.x_authselect.yml
  when: rhel9cis_authselect_custom_profile_select

- name: "SECTION | 5.6.1.x | Shadow Password Suite Parameters"
  ansible.builtin.import_tasks:
      file: cis_5.6.1.x.yml

- name: "SECTION | 5.6.x | Misc. User Account Settings"
  ansible.builtin.import_tasks:
      file: cis_5.6.x.yml