From 511f9cf000a637cd1f45f453833f5c0bcca09db8 Mon Sep 17 00:00:00 2001 From: Mark Bolwell Date: Mon, 23 Jan 2023 18:43:23 +0000 Subject: [PATCH] Added urandom passwd for root Signed-off-by: Mark Bolwell --- .github/workflows/linux_benchmark_testing.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/workflows/linux_benchmark_testing.yml b/.github/workflows/linux_benchmark_testing.yml index 8d26a35..48e7eed 100644 --- a/.github/workflows/linux_benchmark_testing.yml +++ b/.github/workflows/linux_benchmark_testing.yml @@ -87,6 +87,12 @@ jobs: run: sleep 60s shell: bash +# Set up requirements for random root password CIS 5.6.6 + - name: add urandom passwd to root account + shell: bash + run: | + ANSIBLE_HOST_KEY_CHECKING=False && ansible all -i .github/workflows/hosts.yml -m shell -a "cat /dev/urandom | tr -dc ‘[:print:]’ | head -c50 | passwd --stdin root" --private-key ${{ secrets.SSH_PRV_KEY }} -b + # Run the ansible playbook - name: Run_Ansible_Playbook uses: arillso/action.playbook@master