sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

updated for gui discovery and dconf install

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2024-10-22 10:38:26 +01:00
parent e915a7ae5d
commit 68921be0b2
No known key found for this signature in database
GPG key ID: 997FF7FE93AEB5B9
2 changed files with 17 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
defaults/main.yml
View file

@ -569,7 +569,7 @@ rhel9cis_warning_banner: Authorized uses only. All activity may be monitored and
## Control 1.8.x - Settings for GDM ## Control 1.8.x - Settings for GDM
## 1.8 GDM graphical interface ## 1.8 GDM graphical interface
rhel9cis_gui: false rhel9cis_gui: "{{ prelim_gnome_present.stat.exists | default(false) }}"
# This variable specifies the GNOME configuration database file to which configurations are written. # This variable specifies the GNOME configuration database file to which configurations are written.
# (See "https://help.gnome.org/admin/system-admin-guide/stable/dconf-keyfiles.html.en") # (See "https://help.gnome.org/admin/system-admin-guide/stable/dconf-keyfiles.html.en")
# The default database is 'local'. # The default database is 'local'.

16
tasks/prelim.yml
View file

@ -159,6 +159,22 @@
ansible.builtin.set_fact: ansible.builtin.set_fact:
grub2_path: /etc/grub2-efi.cfg grub2_path: /etc/grub2-efi.cfg
- name: "PRELIM | Discover Gnome Desktop Environment"
tags:
- always
ansible.builtin.stat:
path: /usr/share/gnome/gnome-version.xml
register: prelim_gnome_present
- name: "PRELIM | Install dconf if gui installed"
when:
- rhel9cis_gui
tags:
- always
ansible.builtin.package:
name: dconf
state: present
- name: "PRELIM | AUDIT | Wireless adapter pre-requisites" - name: "PRELIM | AUDIT | Wireless adapter pre-requisites"
when: when:
- rhel9cis_rule_3_1_2 - rhel9cis_rule_3_1_2