lint updates

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

tasks/section_4/cis_4.1.1.x.yml

@@ -27,7 +27,7 @@
   service:
       name: auditd
       state: started
-      enabled: yes
+      enabled: true
   when:
       - rhel9cis_rule_4_1_1_2
   tags:
@@ -44,7 +44,7 @@
         shell: grep 'GRUB_CMDLINE_LINUX=' /etc/default/grub | sed 's/.$//'
         changed_when: false
         failed_when: false
-        check_mode: no
+        check_mode: false
         register: rhel9cis_4_1_1_3_grub_cmdline_linux
 
       - name: "4.1.1.3 | PATCH | Ensure auditing for processes that start prior to auditd is enabled | Replace existing setting"
@@ -79,7 +79,7 @@
         shell: grep 'GRUB_CMDLINE_LINUX=' /etc/default/grub | sed 's/.$//'
         changed_when: false
         failed_when: false
-        check_mode: no
+        check_mode: false
         register: rhel9cis_4_1_1_4_grub_cmdline_linux
 
       - name: "4.1.1.4 | PATCH | Ensure audit_backlog_limit is sufficient | Replace existing setting"

tasks/section_4/cis_4.1.3.x.yml

@@ -77,7 +77,7 @@
         shell: for i in  $(df | grep '^/dev' | awk '{ print $NF }'); do find $i -xdev -type f -perm -4000 -o -type f -perm -2000 2>/dev/null; done
         changed_when: false
         failed_when: false
-        check_mode: no
+        check_mode: false
         register: priv_procs
 
       - name: "4.1.3.6 | PATCH | Ensure use of privileged commands is collected"

tasks/section_4/cis_4.2.1.x.yml

@@ -18,7 +18,7 @@
 - name: "4.2.1.2 | PATCH | Ensure rsyslog Service is enabled"
   service:
       name: rsyslog
-      enabled: yes
+      enabled: true
   when:
       - rhel9cis_rule_4_2_1_2
   tags:
@@ -65,10 +65,10 @@
   block:
       - name: "4.2.1.5 | AUDIT | Ensure logging is configured | rsyslog current config message out"
         command: cat /etc/rsyslog.conf
-        become: yes
+        become: true
         changed_when: false
-        failed_when: no
-        check_mode: no
+        failed_when: false
+        check_mode: false
         register: rhel_08_4_2_1_5_audit
 
       - name: "4.2.1.5 | AUDIT | Ensure logging is configured | rsyslog current config message out"

tasks/section_4/cis_4.2.2.x.yml

@@ -39,7 +39,7 @@
   systemd:
       name: systemd-journal-upload
       state: started
-      enabled: yes
+      enabled: true
   when:
       - rhel9cis_system_is_log_server
       - rhel9cis_rule_4_2_2_1_3
@@ -55,8 +55,8 @@
   systemd:
       name: systemd-journal-remote.socket
       state: stopped
-      enabled: no
-      masked: yes
+      enabled: false
+      masked: true
   when:
       - not rhel9cis_system_is_log_server
       - rhel9cis_rule_4_2_2_1_4
@@ -74,7 +74,7 @@
         systemd:
             name: systemd-journald
             state: started
-            enabled: yes
+            enabled: true
 
       - name: "4.2.2.2 | AUDIT | Ensure journald service is enabled | Capture status"
         shell: systemctl is-enabled systemd-journald.service
@@ -91,7 +91,7 @@
       - name: "4.2.2.2 | AUDIT | Ensure journald service is enabled | Warn Count"
         set_fact:
             control_number: "{{ control_number }} + [ 'rule_4.2.2.2' ]"
-            warn_count: "{{ warn_count|int + 1 }}"
+            warn_count: "{{ warn_count | int + 1 }}"
         when: "'static' not in rhel9cis_4_2_2_2_status.stdout"
   when:
       - rhel9cis_rule_4_2_2_2
@@ -203,7 +203,7 @@
       - name: "4.2.2.7 | AUDIT | Ensure journald default file permissions configured | Warn Count"
         set_fact:
             control_number: "{{ control_number }} + [ 'rule_4.2.2.7' ]"
-            warn_count: "{{ warn_count|int + 1 }}"
+            warn_count: "{{ warn_count | int + 1 }}"
   when:
       - rhel9cis_rule_4_2_2_7
   tags: