sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

added nfsnobody

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-04-05 10:09:06 +01:00
parent d5065c1a82
commit 4e873bc0d6
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB
1 changed files with 6 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

11
tasks/section_5/cis_5.6.x.yml
View file

@ -13,6 +13,7 @@
- item.id != "sync" - item.id != "sync"
- item.id != "shutdown" - item.id != "shutdown"
- item.id != "halt" - item.id != "halt"
- item.id != "nfsnobody"
- min_int_uid | int < item.gid - min_int_uid | int < item.gid
- item.shell != " /bin/false" - item.shell != " /bin/false"
- item.shell != " /usr/sbin/nologin" - item.shell != " /usr/sbin/nologin"
@ -30,6 +31,7 @@
- item.id != "shutdown" - item.id != "shutdown"
- item.id != "sync" - item.id != "sync"
- item.id != "root" - item.id != "root"
- item.id != "nfsnobody"
- min_int_uid | int < item.gid - min_int_uid | int < item.gid
- item.shell != " /bin/false" - item.shell != " /bin/false"
- item.shell != " /usr/sbin/nologin" - item.shell != " /usr/sbin/nologin"
@ -51,9 +53,8 @@
mode: 0644 mode: 0644
dest: "{{ item.dest }}" dest: "{{ item.dest }}"
state: "{{ item.state }}" state: "{{ item.state }}"
marker: "# {mark} ANSIBLE MANAGED" marker: "# {mark} CIS 5.6.3 ANSIBLE MANAGED"
block: | block: |
# Set session timeout - CIS ID RHEL-08-5.4.5
TMOUT={{ rhel9cis_shell_session_timeout.timeout }} TMOUT={{ rhel9cis_shell_session_timeout.timeout }}
export TMOUT export TMOUT
readonly TMOUT readonly TMOUT
@ -71,9 +72,9 @@
- rule_5.6.3 - rule_5.6.3
- name: "5.6.4 | PATCH | Ensure default group for the root account is GID 0" - name: "5.6.4 | PATCH | Ensure default group for the root account is GID 0"
command: usermod -g 0 root user:
changed_when: false name: root
failed_when: false group: 0
when: when:
- rhel9cis_rule_5_6_4 - rhel9cis_rule_5_6_4
tags: tags: