forked from ansible-lockdown/RHEL9-CIS
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
a1d0130909
commit
0d155c4182
5 changed files with 5 additions and 4 deletions
|
|
@ -65,6 +65,7 @@
|
|||
set_fact:
|
||||
sysctl_update: true
|
||||
flush_ipv4_route: true
|
||||
|
||||
- name: "3.3.3 | PATCH | Ensure secure ICMP redirects are not accepted"
|
||||
debug:
|
||||
msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/60-netipv4_sysctl.conf"
|
||||
|
|
@ -140,6 +141,7 @@
|
|||
set_fact:
|
||||
sysctl_update: true
|
||||
flush_ipv4_route: true
|
||||
|
||||
- name: "3.3.7 | PATCH | Ensure Reverse Path Filtering is enabled"
|
||||
debug:
|
||||
msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/60-netipv4_sysctl.conf"
|
||||
|
|
|
|||
|
|
@ -172,7 +172,7 @@
|
|||
tags:
|
||||
- level1-server
|
||||
- level1-workstation
|
||||
- automate
|
||||
- automated
|
||||
- patch
|
||||
- nftables
|
||||
- rule_3.4.2.6
|
||||
|
|
|
|||
|
|
@ -65,7 +65,6 @@
|
|||
block:
|
||||
- name: "4.2.1.5 | AUDIT | Ensure logging is configured | rsyslog current config message out"
|
||||
command: cat /etc/rsyslog.conf
|
||||
become: true
|
||||
changed_when: false
|
||||
failed_when: false
|
||||
check_mode: false
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue