sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

section 1 updates

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-04-04 12:07:07 +01:00
parent bfbcede072
commit 39780562c1
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB
9 changed files with 14 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

6
tasks/section_1/cis_1.5.x.yml
View file

@ -3,7 +3,7 @@
- name: "1.5.1 | PATCH | Ensure core dump storage is disabled"
lineinfile:
path: /etc/systemd/coredump.conf
regexp: 'Storage='
regexp: '^Storage\s*=\s*(?!none).*'
line: 'Storage=none'
notify: systemd_daemon_reload
when:
@ -19,7 +19,7 @@
- name: "1.5.2 | PATCH | Ensure core dump backtraces are disabled"
lineinfile:
path: /etc/systemd/coredump.conf
regexp: 'ProcessSizeMax='
regexp: '^ProcessSizeMax\s*=\s*.*[1-9]$'
line: 'ProcessSizeMax=0'
when:
- rhel9cis_rule_1_5_2
@ -33,7 +33,7 @@
- name: "1.5.3 | PATCH | Ensure address space layout randomization (ASLR) is enabled"
debug:
msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/99-sysctl.conf"
msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/60-kernel_sysctl.conf"
notify:
- update sysctl
when: