forked from ansible-lockdown/RHEL9-CIS
lint updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
deb509c873
commit
5bcb791647
3 changed files with 8 additions and 15 deletions
|
|
@ -9,12 +9,6 @@ ignore: |
|
||||||
extends: default
|
extends: default
|
||||||
|
|
||||||
rules:
|
rules:
|
||||||
indentation:
|
|
||||||
# Requiring 4 space indentation
|
|
||||||
spaces: 4
|
|
||||||
# Requiring consistent indentation within a file, either indented or not
|
|
||||||
indent-sequences: consistent
|
|
||||||
truthy: disable
|
|
||||||
braces:
|
braces:
|
||||||
max-spaces-inside: 1
|
max-spaces-inside: 1
|
||||||
level: error
|
level: error
|
||||||
|
|
@ -32,4 +26,4 @@ rules:
|
||||||
trailing-spaces: enable
|
trailing-spaces: enable
|
||||||
truthy:
|
truthy:
|
||||||
allowed-values: ['true', 'false']
|
allowed-values: ['true', 'false']
|
||||||
check-keys: false
|
check-keys: true
|
||||||
|
|
|
||||||
|
|
@ -48,4 +48,3 @@
|
||||||
- skip_ansible_lint
|
- skip_ansible_lint
|
||||||
- rule_1.1.3.2
|
- rule_1.1.3.2
|
||||||
- rule_1.1.3.3
|
- rule_1.1.3.3
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -90,9 +90,9 @@
|
||||||
block:
|
block:
|
||||||
- name: "1.2.4 | PATCH | Ensure repo_gpgcheck is globally activated | dnf.conf"
|
- name: "1.2.4 | PATCH | Ensure repo_gpgcheck is globally activated | dnf.conf"
|
||||||
ansible.builtin.lineinfile:
|
ansible.builtin.lineinfile:
|
||||||
path: /etc/dnf/dnf.conf
|
path: /etc/dnf/dnf.conf
|
||||||
regexp: '^repo_gpgcheck'
|
regexp: '^repo_gpgcheck'
|
||||||
line: repo_gpgcheck=1
|
line: repo_gpgcheck=1
|
||||||
|
|
||||||
- name: "1.2.4 | AUDIT| Ensure repo_gpgcheck is globally activated | get repo files"
|
- name: "1.2.4 | AUDIT| Ensure repo_gpgcheck is globally activated | get repo files"
|
||||||
ansible.builtin.find:
|
ansible.builtin.find:
|
||||||
|
|
@ -102,9 +102,9 @@
|
||||||
|
|
||||||
- name: "1.2.4 | PATCH | Ensure repo_gpgcheck is globally activated | amend repo files"
|
- name: "1.2.4 | PATCH | Ensure repo_gpgcheck is globally activated | amend repo files"
|
||||||
ansible.builtin.replace:
|
ansible.builtin.replace:
|
||||||
path: "{{ item.path }}"
|
path: "{{ item.path }}"
|
||||||
regexp: '^repo_gpgcheck( |)=( |)0'
|
regexp: '^repo_gpgcheck( |)=( |)0'
|
||||||
replace: repo_gpgcheck=1
|
replace: repo_gpgcheck=1
|
||||||
loop: "{{ repo_files.files }}"
|
loop: "{{ repo_files.files }}"
|
||||||
loop_control:
|
loop_control:
|
||||||
label: "{{ item.path }}"
|
label: "{{ item.path }}"
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue