sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

Merge pull request #89 from ansible-lockdown/devel

Browse source 
workflow check run
This commit is contained in:
uk-bolly 2023-08-10 14:25:08 +01:00 • committed by GitHub
commit 00e6f196b5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
4 changed files with 9 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

8
.config/.secrets.baseline
View file

@ -124,7 +124,7 @@
"filename": "defaults/main.yml", "filename": "defaults/main.yml",
"hashed_secret": "5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8", "hashed_secret": "5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8",
"is_verified": false, "is_verified": false,
"line_number": 363, "line_number": 364,
"is_secret": false "is_secret": false
}, },
{ {
@ -132,7 +132,7 @@
"filename": "defaults/main.yml", "filename": "defaults/main.yml",
"hashed_secret": "fe96f7cfa2ab2224e7d015067a6f6cc713f7012e", "hashed_secret": "fe96f7cfa2ab2224e7d015067a6f6cc713f7012e",
"is_verified": false, "is_verified": false,
"line_number": 374, "line_number": 375,
"is_secret": false "is_secret": false
}, },
{ {
@ -140,7 +140,7 @@
"filename": "defaults/main.yml", "filename": "defaults/main.yml",
"hashed_secret": "a415ab5cc17c8c093c015ccdb7e552aee7911aa4", "hashed_secret": "a415ab5cc17c8c093c015ccdb7e552aee7911aa4",
"is_verified": false, "is_verified": false,
"line_number": 375, "line_number": 376,
"is_secret": false "is_secret": false
} }
], ],
@ -172,5 +172,5 @@
} }
] ]
}, },
"generated_at": "2023-08-09T08:11:03Z" "generated_at": "2023-08-10T12:54:13Z"
} }

2
README.md
View file

@ -111,7 +111,7 @@ OracleLinux 9
CentOS stream - while this will generally work it is not supported and requires the following variable setting CentOS stream - while this will generally work it is not supported and requires the following variable setting
```sh ```sh
check_os: false os_check: false
``` ```
**General:** **General:**

1
defaults/main.yml
View file

@ -8,6 +8,7 @@ container_vars_file: is_container.yml
system_is_ec2: false system_is_ec2: false
# Run the OS validation check # Run the OS validation check
# Supported OSs will not need for this to be changed - see README e.g. CentOS
os_check: true os_check: true
rhel9cis_section1: true rhel9cis_section1: true

6
tasks/main.yml
View file

@ -44,14 +44,14 @@
- user_passwd - user_passwd
- rule_5.3.4 - rule_5.3.4
- name: "Ensure root password is set" - name: Ensure root password is set
block: block:
- name: "Ensure root password is set" - name: Ensure root password is set
ansible.builtin.shell: passwd -S root | grep "Password set, SHA512 crypt" ansible.builtin.shell: passwd -S root | grep "Password set, SHA512 crypt"
changed_when: false changed_when: false
register: root_passwd_set register: root_passwd_set
- name: "Ensure root password is set" - name: Ensure root password is set
ansible.builtin.assert: ansible.builtin.assert:
that: root_passwd_set.rc == 0 that: root_passwd_set.rc == 0
fail_msg: "You have rule 5.6.6 enabled this requires that you have a root password set" fail_msg: "You have rule 5.6.6 enabled this requires that you have a root password set"