forked from ansible-lockdown/RHEL9-CIS
linting
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
2974fa5385
commit
1e22c13794
8 changed files with 38 additions and 31 deletions
|
|
@ -78,7 +78,7 @@
|
||||||
shell: "grub2-mkconfig -o /boot/grub2/grub.cfg"
|
shell: "grub2-mkconfig -o /boot/grub2/grub.cfg"
|
||||||
args:
|
args:
|
||||||
warn: false
|
warn: false
|
||||||
ignore_errors: True
|
ignore_errors: true
|
||||||
tags:
|
tags:
|
||||||
- skip_ansible_lint
|
- skip_ansible_lint
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -1,3 +1,5 @@
|
||||||
|
---
|
||||||
|
|
||||||
- name: POST | AUDITD | Apply auditd template will for section 4.1.3 - only required rules will be added
|
- name: POST | AUDITD | Apply auditd template will for section 4.1.3 - only required rules will be added
|
||||||
template:
|
template:
|
||||||
src: audit/99_auditd.rules.j2
|
src: audit/99_auditd.rules.j2
|
||||||
|
|
|
||||||
|
|
@ -53,7 +53,7 @@
|
||||||
- name: "POST | Warning a reboot required but skip option set | warning count"
|
- name: "POST | Warning a reboot required but skip option set | warning count"
|
||||||
set_fact:
|
set_fact:
|
||||||
control_number: "{{ control_number }} + [ 'Reboot_required' ]"
|
control_number: "{{ control_number }} + [ 'Reboot_required' ]"
|
||||||
warn_count: "{{ warn_count|int + 1 }}"
|
warn_count: "{{ warn_count | int + 1 }}"
|
||||||
when:
|
when:
|
||||||
- change_requires_reboot
|
- change_requires_reboot
|
||||||
- skip_reboot
|
- skip_reboot
|
||||||
|
|
|
||||||
|
|
@ -2,7 +2,7 @@
|
||||||
|
|
||||||
- name: "Post Audit | Run post_remediation {{ benchmark }} audit"
|
- name: "Post Audit | Run post_remediation {{ benchmark }} audit"
|
||||||
shell: "{{ audit_conf_dir }}/run_audit.sh -v {{ audit_vars_path }} -o {{ post_audit_outfile }} -g {{ group_names }}"
|
shell: "{{ audit_conf_dir }}/run_audit.sh -v {{ audit_vars_path }} -o {{ post_audit_outfile }} -g {{ group_names }}"
|
||||||
environment: "{{ audit_run_script_environment|default({}) }}"
|
environment: "{{ audit_run_script_environment | default({}) }}"
|
||||||
changed_when: audit_run_post_remediation.rc == 0
|
changed_when: audit_run_post_remediation.rc == 0
|
||||||
register: audit_run_post_remediation
|
register: audit_run_post_remediation
|
||||||
args:
|
args:
|
||||||
|
|
@ -28,7 +28,7 @@
|
||||||
|
|
||||||
- name: Capture post-audit result
|
- name: Capture post-audit result
|
||||||
set_fact:
|
set_fact:
|
||||||
post_audit_summary: "{{ post_audit.stdout | from_json |json_query(summary) }}"
|
post_audit_summary: "{{ post_audit.stdout | from_json | json_query(summary) }}"
|
||||||
vars:
|
vars:
|
||||||
summary: 'summary."summary-line"'
|
summary: 'summary."summary-line"'
|
||||||
when:
|
when:
|
||||||
|
|
|
||||||
|
|
@ -33,6 +33,9 @@
|
||||||
get_url:
|
get_url:
|
||||||
url: "{{ audit_files_url }}"
|
url: "{{ audit_files_url }}"
|
||||||
dest: "{{ audit_conf_dir }}"
|
dest: "{{ audit_conf_dir }}"
|
||||||
|
owner: root
|
||||||
|
group: root
|
||||||
|
mode: 0755
|
||||||
when:
|
when:
|
||||||
- audit_content == 'get_url'
|
- audit_content == 'get_url'
|
||||||
|
|
||||||
|
|
@ -70,7 +73,7 @@
|
||||||
|
|
||||||
- name: "Pre Audit | Run pre_remediation {{ benchmark }} audit"
|
- name: "Pre Audit | Run pre_remediation {{ benchmark }} audit"
|
||||||
shell: "{{ audit_conf_dir }}/run_audit.sh -v {{ audit_vars_path }} -o {{ pre_audit_outfile }} -g {{ group_names }}"
|
shell: "{{ audit_conf_dir }}/run_audit.sh -v {{ audit_vars_path }} -o {{ pre_audit_outfile }} -g {{ group_names }}"
|
||||||
environment: "{{ audit_run_script_environment|default({}) }}"
|
environment: "{{ audit_run_script_environment | default({}) }}"
|
||||||
changed_when: audit_run_pre_remediation.rc == 0
|
changed_when: audit_run_pre_remediation.rc == 0
|
||||||
register: audit_run_pre_remediation
|
register: audit_run_pre_remediation
|
||||||
args:
|
args:
|
||||||
|
|
@ -87,7 +90,7 @@
|
||||||
|
|
||||||
- name: Pre Audit | Capture pre-audit result
|
- name: Pre Audit | Capture pre-audit result
|
||||||
set_fact:
|
set_fact:
|
||||||
pre_audit_summary: "{{ pre_audit.stdout | from_json |json_query(summary) }}"
|
pre_audit_summary: "{{ pre_audit.stdout | from_json | json_query(summary) }}"
|
||||||
vars:
|
vars:
|
||||||
summary: 'summary."summary-line"'
|
summary: 'summary."summary-line"'
|
||||||
when:
|
when:
|
||||||
|
|
|
||||||
|
|
@ -217,7 +217,9 @@
|
||||||
min_int_uid: "{{ uid_min_id.stdout }}"
|
min_int_uid: "{{ uid_min_id.stdout }}"
|
||||||
max_int_uid: "{{ uid_max_id.stdout }}"
|
max_int_uid: "{{ uid_max_id.stdout }}"
|
||||||
min_int_gid: "{{ gid_min_id.stdout }}"
|
min_int_gid: "{{ gid_min_id.stdout }}"
|
||||||
- debug:
|
|
||||||
|
- name: Output of uid findings
|
||||||
|
debug:
|
||||||
msg: "{{ min_int_uid }} {{ max_int_uid }}"
|
msg: "{{ min_int_uid }} {{ max_int_uid }}"
|
||||||
|
|
||||||
when:
|
when:
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue