forked from ansible-lockdown/RHEL9-CIS
rule_1.10 updates
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
3c3ddfa474
commit
674d3417ff
5 changed files with 50 additions and 14 deletions
|
|
@ -62,10 +62,19 @@
|
|||
state: present
|
||||
|
||||
- name: "PRELIM | Gather system-wide crypto-policy"
|
||||
ansible.builtin.shell: update-crypto-policies --show
|
||||
ansible.builtin.shell: 'update-crypto-policies --show'
|
||||
changed_when: false
|
||||
check_mode: false
|
||||
register: system_wide_crypto_policy
|
||||
|
||||
- name: "PRELIM | Gather system-wide crypto-policy"
|
||||
ansible.builtin.set_fact:
|
||||
current_crypto_policy: "{{ system_wide_crypto_policy.stdout.split(':')[0] }}"
|
||||
|
||||
- name: "PRELIM | Gather system-wide crypto-policy module"
|
||||
ansible.builtin.set_fact:
|
||||
current_crypto_module: "{{ system_wide_crypto_policy.stdout.split(':')[1] }}"
|
||||
when: "':' in system_wide_crypto_policy.stdout"
|
||||
when:
|
||||
- rhel9cis_rule_1_10
|
||||
tags:
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue