sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

Added Nist values

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2024-07-22 12:42:39 +01:00
parent 8b58d71e4b
commit 2bf67cde0d
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
16 changed files with 100 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

6
tasks/section_1/cis_1.1.2.1.x.yml
View file

@ -10,6 +10,7 @@
- audit
- mounts
- rule_1.1.2.1.1
- NIST800-53R5_CM-7
vars:
warn_control_id: '1.1.2.1.1'
required_mount: '/tmp'
@ -51,6 +52,9 @@
- rule_1.1.2.1.2
- rule_1.1.2.1.3
- rule_1.1.2.1.4
- NIST800-53R5_CM-7
- NIST800-53R5_AC-3
- NIST800-53R5_MP-2
# via systemd
- name: |
@ -73,6 +77,8 @@
- rule_1.1.2.1.2
- rule_1.1.2.1.3
- rule_1.1.2.1.4
- NIST800-53R5_AC-3
- NIST800-53R5_MP-2
ansible.builtin.template:
src: etc/systemd/system/tmp.mount.j2
dest: /etc/systemd/system/tmp.mount