sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

reorder 3.4.1.2

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-04-05 10:08:21 +01:00
parent 96abe45eb2
commit 32c409cb48
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB
1 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
tasks/section_3/cis_3.4.1.x.yml
View file

@ -21,16 +21,18 @@
- name: "3.4.1.2 | PATCH | Ensure iptables-services not installed with firewalld | Stop running services" - name: "3.4.1.2 | PATCH | Ensure iptables-services not installed with firewalld | Stop running services"
systemd: systemd:
name: "{{ item }}" name: "{{ item }}"
masked: true state: stopped
enabled: false
with_items: with_items:
- iptables - iptables
- ip6tables - ip6tables
when: item in ansible_facts.packages when: item in ansible_facts.packages
- name: "3.4.1.2 | PATCH | Ensure iptables-services not installed with firewalld | Remove IPTables" - name: "3.4.1.2 | PATCH | Ensure iptables-services not installed with firewalld | remove iptables-services pkg "
package: package:
name: iptables-services name: iptables-services
state: absent state: absent
when: "'iptables-services' in ansible_facts.packages"
when: when:
- rhel9cis_rule_3_4_1_2 - rhel9cis_rule_3_4_1_2
tags: tags: