From 83f0fb30ecaaa0af68a1eda9b0d07b497cb1238f Mon Sep 17 00:00:00 2001 From: Mark Bolwell Date: Tue, 26 Apr 2022 12:01:06 +0100 Subject: [PATCH] updated regex Signed-off-by: Mark Bolwell --- tasks/section_5/cis_5.6.x.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tasks/section_5/cis_5.6.x.yml b/tasks/section_5/cis_5.6.x.yml index a9eaf75..91540ea 100644 --- a/tasks/section_5/cis_5.6.x.yml +++ b/tasks/section_5/cis_5.6.x.yml @@ -90,13 +90,13 @@ - name: "5.6.5 | PATCH | Ensure default user umask is 027 or more restrictive | Set umask for /etc/bashrc" replace: path: /etc/bashrc - regexp: '^(\s+UMASK|UMASK)\s0[0-2][0-6]' + regexp: '^(?i)(\s+UMASK|UMASK)\s0[0-2][0-6]' replace: 'UMASK 027' - name: "5.6.5 | PATCH | Ensure default user umask is 027 or more restrictive | Set umask for /etc/profile" replace: path: /etc/profile - regexp: '^(\s+UMASK|UMASK)\s0[0-2][0-6]' + regexp: '^(?i)(\s+UMASK|UMASK)\s0[0-2][0-6]' replace: 'UMASK 027' when: - rhel9cis_rule_5_6_5