forked from ansible-lockdown/RHEL9-CIS
addition of audit_only config
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
8784941179
commit
23a4386e95
5 changed files with 103 additions and 49 deletions
|
|
@ -133,11 +133,22 @@
|
|||
- prelim_tasks
|
||||
- always
|
||||
|
||||
- name: run pre_remediation audit
|
||||
ansible.builtin.include_tasks:
|
||||
file: pre_remediation_audit.yml
|
||||
- name: Include audit specific variables
|
||||
when:
|
||||
- run_audit or audit_only
|
||||
- setup_audit
|
||||
tags:
|
||||
- setup_audit
|
||||
- run_audit
|
||||
ansible.builtin.include_vars: audit.yml
|
||||
|
||||
- name: Include pre-remediation audit tasks
|
||||
when:
|
||||
- run_audit or audit_only
|
||||
- setup_audit
|
||||
tags:
|
||||
- run_audit
|
||||
ansible.builtin.import_tasks: pre_remediation_audit.yml
|
||||
|
||||
- name: run Section 1 tasks
|
||||
ansible.builtin.import_tasks:
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue