sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

updated audit vars naming, AMD & ARM binaries

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-07-28 15:16:50 +01:00
parent b631459e9b
commit 009c9fc498
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
4 changed files with 99 additions and 88 deletions
Download patch file Download diff file Expand all files Collapse all files

10
tasks/post_remediation_audit.yml
View file

@ -2,9 +2,11 @@
- name: "Post Audit | Run post_remediation {{ benchmark }} audit"
ansible.builtin.shell: "{{ audit_conf_dir }}/run_audit.sh -v {{ audit_vars_path }} -o {{ post_audit_outfile }} -g {{ group_names }}"
environment: "{{ audit_run_script_environment | default({}) }}"
changed_when: audit_run_post_remediation.rc == 0
register: audit_run_post_remediation
changed_when: true
environment:
AUDIT_BIN: "{{ audit_bin }}"
AUDIT_CONTENT_LOCATION: "{{ audit_out_dir }}"
AUDIT_FILE: "goss.yml"
- name: Post Audit | ensure audit files readable by users
ansible.builtin.file:
@ -17,7 +19,7 @@
- name: Post Audit | Capture audit data if json format
block:
- name: "Capture data {{ post_audit_outfile }}"
- name: "capture data {{ post_audit_outfile }}"
ansible.builtin.shell: "cat {{ post_audit_outfile }}"
register: post_audit
changed_when: false