forked from ansible-lockdown/RHEL9-CIS
commit
438fc01630
2 changed files with 4 additions and 4 deletions
|
|
@ -111,7 +111,7 @@ OracleLinux 9
|
|||
CentOS stream - while this will generally work it is not supported and requires the following variable setting
|
||||
|
||||
```sh
|
||||
check_os: false
|
||||
os_check: false
|
||||
```
|
||||
|
||||
**General:**
|
||||
|
|
|
|||
|
|
@ -44,14 +44,14 @@
|
|||
- user_passwd
|
||||
- rule_5.3.4
|
||||
|
||||
- name: "Ensure root password is set"
|
||||
- name: Ensure root password is set
|
||||
block:
|
||||
- name: "Ensure root password is set"
|
||||
- name: Ensure root password is set
|
||||
ansible.builtin.shell: passwd -S root | grep "Password set, SHA512 crypt"
|
||||
changed_when: false
|
||||
register: root_passwd_set
|
||||
|
||||
- name: "Ensure root password is set"
|
||||
- name: Ensure root password is set
|
||||
ansible.builtin.assert:
|
||||
that: root_passwd_set.rc == 0
|
||||
fail_msg: "You have rule 5.6.6 enabled this requires that you have a root password set"
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue