forked from ansible-lockdown/RHEL9-CIS
updated yamllint, company naming, linting and spacing
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
1b694832bb
commit
2de8a39cdc
66 changed files with 461 additions and 675 deletions
|
|
@ -1,8 +1,7 @@
|
|||
---
|
||||
|
||||
- name: "2.4.1.1 | PATCH | Ensure cron daemon is enabled"
|
||||
when:
|
||||
- rhel9cis_rule_2_4_1_1
|
||||
when: rhel9cis_rule_2_4_1_1
|
||||
tags:
|
||||
- level1-server
|
||||
- level1-workstation
|
||||
|
|
@ -19,8 +18,7 @@
|
|||
enabled: true
|
||||
|
||||
- name: "2.4.1.2 | PATCH | Ensure permissions on /etc/crontab are configured"
|
||||
when:
|
||||
- rhel9cis_rule_2_4_1_2
|
||||
when: rhel9cis_rule_2_4_1_2
|
||||
tags:
|
||||
- level1-server
|
||||
- level1-workstation
|
||||
|
|
@ -33,11 +31,10 @@
|
|||
path: /etc/crontab
|
||||
owner: root
|
||||
group: root
|
||||
mode: og-rwx
|
||||
mode: 'og-rwx'
|
||||
|
||||
- name: "2.4.1.3 | PATCH | Ensure permissions on /etc/cron.hourly are configured"
|
||||
when:
|
||||
- rhel9cis_rule_2_4_1_3
|
||||
when: rhel9cis_rule_2_4_1_3
|
||||
tags:
|
||||
- level1-server
|
||||
- level1-workstation
|
||||
|
|
@ -51,11 +48,10 @@
|
|||
state: directory
|
||||
owner: root
|
||||
group: root
|
||||
mode: og-rwx
|
||||
mode: 'og-rwx'
|
||||
|
||||
- name: "2.4.1.4 | PATCH | Ensure permissions on /etc/cron.daily are configured"
|
||||
when:
|
||||
- rhel9cis_rule_2_4_1_4
|
||||
when: rhel9cis_rule_2_4_1_4
|
||||
tags:
|
||||
- level1-server
|
||||
- level1-workstation
|
||||
|
|
@ -67,11 +63,10 @@
|
|||
state: directory
|
||||
owner: root
|
||||
group: root
|
||||
mode: og-rwx
|
||||
mode: 'og-rwx'
|
||||
|
||||
- name: "2.4.1.5 | PATCH | Ensure permissions on /etc/cron.weekly are configured"
|
||||
when:
|
||||
- rhel9cis_rule_2_4_1_5
|
||||
when: rhel9cis_rule_2_4_1_5
|
||||
tags:
|
||||
- level1-server
|
||||
- level1-workstation
|
||||
|
|
@ -84,11 +79,10 @@
|
|||
state: directory
|
||||
owner: root
|
||||
group: root
|
||||
mode: og-rwx
|
||||
mode: 'og-rwx'
|
||||
|
||||
- name: "2.4.1.6 | PATCH | Ensure permissions on /etc/cron.monthly are configured"
|
||||
when:
|
||||
- rhel9cis_rule_2_4_1_6
|
||||
when: rhel9cis_rule_2_4_1_6
|
||||
tags:
|
||||
- level1-server
|
||||
- level1-workstation
|
||||
|
|
@ -101,11 +95,10 @@
|
|||
state: directory
|
||||
owner: root
|
||||
group: root
|
||||
mode: og-rwx
|
||||
mode: 'og-rwx'
|
||||
|
||||
- name: "2.4.1.7 | PATCH | Ensure permissions on /etc/cron.d are configured"
|
||||
when:
|
||||
- rhel9cis_rule_2_4_1_7
|
||||
when: rhel9cis_rule_2_4_1_7
|
||||
tags:
|
||||
- level1-server
|
||||
- level1-workstation
|
||||
|
|
@ -119,11 +112,10 @@
|
|||
state: directory
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0700'
|
||||
mode: 'og-rwx'
|
||||
|
||||
- name: "2.4.1.8 | PATCH | Ensure crontab is restricted to authorized users"
|
||||
when:
|
||||
- rhel9cis_rule_2_4_1_8
|
||||
when: rhel9cis_rule_2_4_1_8
|
||||
tags:
|
||||
- level1-server
|
||||
- level1-workstation
|
||||
|
|
@ -146,14 +138,13 @@
|
|||
- name: "2.4.1.8 | PATCH | Ensure crontab is restricted to authorized users | Ensure cron.allow is restricted to authorized users"
|
||||
ansible.builtin.file:
|
||||
path: /etc/cron.allow
|
||||
state: '{{ "file" if discovered_cron_allow_state.stat.exists else "touch" }}'
|
||||
state: '{{ "file" if discovered_cron_allow_state.stat.exists else "touch" }}'
|
||||
owner: root
|
||||
group: root
|
||||
mode: u-x,g-wx,o-rwx
|
||||
mode: 'u-x,g-wx,o-rwx'
|
||||
|
||||
- name: "2.4.2.1 | PATCH | Ensure at is restricted to authorized users"
|
||||
when:
|
||||
- rhel9cis_rule_2_4_2_1
|
||||
when: rhel9cis_rule_2_4_2_1
|
||||
tags:
|
||||
- level1-server
|
||||
- level1-workstation
|
||||
|
|
@ -179,4 +170,4 @@
|
|||
state: '{{ "file" if discovered_at_allow_state.stat.exists else "touch" }}'
|
||||
owner: root
|
||||
group: root
|
||||
mode: u-x,g-wx,o-rwx
|
||||
mode: 'u-x,g-wx,o-rwx'
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue