forked from ansible-lockdown/RHEL9-CIS
1.4.2 to use template
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
115999956f
commit
2d83b7f06d
2 changed files with 11 additions and 10 deletions
|
|
@ -28,16 +28,12 @@
|
||||||
- rule_1.4.1
|
- rule_1.4.1
|
||||||
|
|
||||||
- name: "1.4.2 | L1 | PATCH | Ensure filesystem integrity is regularly checked"
|
- name: "1.4.2 | L1 | PATCH | Ensure filesystem integrity is regularly checked"
|
||||||
cron:
|
template:
|
||||||
name: Run AIDE integrity check
|
src: aide.cron.j2
|
||||||
cron_file: "{{ rhel9cis_aide_cron['cron_file'] }}"
|
dest: /etc/cron.d/aide.cron
|
||||||
user: "{{ rhel9cis_aide_cron['cron_user'] }}"
|
owner: root
|
||||||
minute: "{{ rhel9cis_aide_cron['aide_minute'] | default('0') }}"
|
group: root
|
||||||
hour: "{{ rhel9cis_aide_cron['aide_hour'] | default('5') }}"
|
mode: 0644
|
||||||
day: "{{ rhel9cis_aide_cron['aide_day'] | default('*') }}"
|
|
||||||
month: "{{ rhel9cis_aide_cron['aide_month'] | default('*') }}"
|
|
||||||
weekday: "{{ rhel9cis_aide_cron['aide_weekday'] | default('*') }}"
|
|
||||||
job: "{{ rhel9cis_aide_cron['aide_job'] }}"
|
|
||||||
when:
|
when:
|
||||||
- rhel9cis_rule_1_4_2
|
- rhel9cis_rule_1_4_2
|
||||||
tags:
|
tags:
|
||||||
|
|
|
||||||
5
templates/aide.cron.j2
Normal file
5
templates/aide.cron.j2
Normal file
|
|
@ -0,0 +1,5 @@
|
||||||
|
# Run AIDE integrity check
|
||||||
|
# added via ansible-lockdown remediation
|
||||||
|
# CIS 1.4.2
|
||||||
|
|
||||||
|
{{ rhel9cis_aide_cron['aide_minute'] }} {{ rhel9cis_aide_cron['aide_hour'] }} {{ rhel9cis_aide_cron['aide_month'] }} {{ rhel9cis_aide_cron['aide_weekday'] }} {{ rhel9cis_aide_cron['aide_job'] }}
|
||||||
Loading…
Add table
Add a link
Reference in a new issue