forked from ansible-lockdown/RHEL9-CIS
updated environment options
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
33cfc54a5e
commit
627f6e291d
3 changed files with 12 additions and 0 deletions
|
|
@ -622,6 +622,12 @@ rhel9cis_passwd_label: "{{ (this_item | default(item)).id }}: {{ (this_item | de
|
||||||
# 6.2.9
|
# 6.2.9
|
||||||
rhel9cis_dotperm_ansiblemanaged: true
|
rhel9cis_dotperm_ansiblemanaged: true
|
||||||
#### Goss Configuration Settings ####
|
#### Goss Configuration Settings ####
|
||||||
|
# Set correct env for the run_audit.sh script from https://github.com/ansible-lockdown/{{ benchmark }}-Audit.git"
|
||||||
|
audit_run_script_environment:
|
||||||
|
AUDIT_BIN: "{{ audit_bin }}"
|
||||||
|
AUDIT_FILE: 'goss.yml'
|
||||||
|
AUDIT_CONTENT_LOCATION: "{{ audit_out_dir }}"
|
||||||
|
|
||||||
|
|
||||||
### Goss binary settings ###
|
### Goss binary settings ###
|
||||||
goss_version:
|
goss_version:
|
||||||
|
|
|
||||||
|
|
@ -2,6 +2,9 @@
|
||||||
|
|
||||||
- name: "Post Audit | Run post_remediation {{ benchmark }} audit"
|
- name: "Post Audit | Run post_remediation {{ benchmark }} audit"
|
||||||
shell: "{{ audit_conf_dir }}/run_audit.sh -v {{ audit_vars_path }} -o {{ post_audit_outfile }} -g {{ group_names }}"
|
shell: "{{ audit_conf_dir }}/run_audit.sh -v {{ audit_vars_path }} -o {{ post_audit_outfile }} -g {{ group_names }}"
|
||||||
|
Environment: "{{ audit_run_script_environment|default({}) }}"
|
||||||
|
changed_when: audit_run_post_remediation.rc == 0
|
||||||
|
register: audit_run_post_remediation
|
||||||
args:
|
args:
|
||||||
warn: false
|
warn: false
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -86,6 +86,9 @@
|
||||||
|
|
||||||
- name: "Pre Audit | Run pre_remediation {{ benchmark }} audit"
|
- name: "Pre Audit | Run pre_remediation {{ benchmark }} audit"
|
||||||
shell: "{{ audit_conf_dir }}/run_audit.sh -v {{ audit_vars_path }} -o {{ pre_audit_outfile }} -g {{ group_names }}"
|
shell: "{{ audit_conf_dir }}/run_audit.sh -v {{ audit_vars_path }} -o {{ pre_audit_outfile }} -g {{ group_names }}"
|
||||||
|
Environment: "{{ audit_run_script_environment|default({}) }}"
|
||||||
|
changed_when: audit_run_pre_remediation.rc == 0
|
||||||
|
register: audit_run_pre_remediation
|
||||||
args:
|
args:
|
||||||
warn: false
|
warn: false
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue