sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

Added a means to allow system users to have a shell

Browse source 
Signed-off-by: Jeffrey van Pelt <jeff@vanpelt.one>
This commit is contained in:
Jeffrey van Pelt 2024-11-11 17:38:04 +01:00
parent 3c75296d91
commit 28a35960d7
No known key found for this signature in database
GPG key ID: 39EFF6AA1F5B11A0
2 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
tasks/section_5/cis_5.6.x.yml
View file

@ -13,6 +13,7 @@
- item.id != "shutdown"
- item.id != "halt"
- item.id != "nfsnobody"
- item.id not in rhel9cis_system_users_shell
- item.uid < min_int_uid | int
- item.shell != "/bin/false"
- item.shell != "/usr/sbin/nologin"