update blacklist

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

tasks/section_3/cis_3.1.x.yml

@@ -54,14 +54,24 @@
       - rule_3.1.2
 
 - name: "3.1.3 | PATCH | Ensure TIPC is disabled"
-  ansible.builtin.template:
+  block:
-      src: "etc/modprobe.d/modprobe.conf.j2"
+      - name: "3.1.3 | PATCH | Ensure TIPC is disabled"
-      dest: "/etc/modprobe.d/{{ item }}.conf"
+        ansible.builtin.template:
-      mode: "0600"
+            src: "etc/modprobe.d/modprobe.conf.j2"
-      owner: root
+            dest: "/etc/modprobe.d/{{ item }}.conf"
-      group: root
+            mode: "0600"
-  with_items:
+            owner: root
-      - tipc
+            group: root
+        with_items:
+            - tipc
+
+      - name: "3.1.3 | PATCH | Ensure TIPC is disabled | blacklist"
+        ansible.builtin.lineinfile:
+            path: /etc/modprobe.d/blacklist.conf
+            regexp: "^(#)?blacklist tipc(\\s|$)"
+            line: "blacklist tipc"
+            create: true
+            mode: 0600
   when:
       - rhel9cis_rule_3_1_3
   tags: