sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

update EOL spacing

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-08-08 18:53:23 +01:00
parent 4878eff7a7
commit 0b6bb8afd7
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
12 changed files with 14 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.gitignore vendored
View file

@ -12,7 +12,7 @@ delete*
ignore*
test_inv
# temp remove doc while this is built up
doc/
doc/
# VSCode
.vscode

2
templates/ansible_vars_goss.yml.j2
View file

@ -486,7 +486,7 @@ rhel9cis_authselect_custom_profile_create: {{ rhel9cis_authselect_custom_profile
# 5.5.1
## PAM
rhel9cis_pam_password:
rhel9cis_pam_password:
minlen: {{ rhel9cis_pam_password['minlen'] }}
minclass: {{ rhel9cis_pam_password['minclass'] }}
rhel9cis_pam_passwd_retry: "3"

4
templates/audit/98_auditd_exception.rules.j2
View file

@ -1,10 +1,10 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
### YOUR CHANGES WILL BE LOST!
# This file contains users whose actions are not logged by auditd
{% if rhel9cis_allow_auditd_uid_user_exclusions %}
{% if rhel9cis_allow_auditd_uid_user_exclusions %}
{% for user in rhel9cis_auditd_uid_exclude %}
-a never,user -F uid!={{ user }} -F auid!={{ user }}
{% endfor %}

2
templates/audit/99_auditd.rules.j2
View file

@ -1,5 +1,5 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
### YOUR CHANGES WILL BE LOST!

2
templates/etc/dconf/db/00-automount_lock.j2
View file

@ -1,5 +1,5 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
# Lock desktop media-handling automount setting

4
templates/etc/dconf/db/00-autorun_lock.j2
View file

@ -1,6 +1,6 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
# Lock desktop media-handling settings
# Lock desktop media-handling settings
/org/gnome/desktop/media-handling/autorun-never

2
templates/etc/dconf/db/00-media-automount.j2
View file

@ -1,5 +1,5 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
[org/gnome/desktop/media-handling]

2
templates/etc/dconf/db/00-media-autorun.j2
View file

@ -1,5 +1,5 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
[org/gnome/desktop/media-handling]

2
templates/etc/dconf/db/00-screensaver.j2
View file

@ -1,5 +1,5 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
# Specify the dconf path

2
templates/etc/dconf/db/00-screensaver_lock.j2
View file

@ -1,5 +1,5 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
# Lock desktop screensaver idle-delay setting

2
templates/etc/dconf/db/gdm.d/01-banner-message.j2
View file

@ -1,5 +1,5 @@
## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
[org/gnome/login-screen]

2
templates/etc/sysctl.d/60-disable_ipv6.conf.j2
View file

@ -2,6 +2,6 @@
# IPv6 disable
{% if rhel9cis_rule_3_1_1 and rhel9cis_ipv6_required %}
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
{% endif %}