improved find

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2023-01-12 15:01:59 +00:00 · 2023-01-12 15:01:59 +00:00 · 876b5d3508
commit 876b5d3508
parent c129d9af23
1 changed files with 6 additions and 3 deletions
--- a/tasks/section_4/cis_4.2.3.yml
+++ b/tasks/section_4/cis_4.2.3.yml
@ -5,14 +5,17 @@
      - name: "4.2.3 | AUDIT | Ensure permissions on all logfiles are configured | find files"
        ansible.builtin.find:
            paths: "/var/log"
-            type: file
+            file_type: file
+            recurse: true
        register: logfiles

      - name: "4.2.3 | AUDIT | Ensure permissions on all logfiles are configured | find files"
        ansible.builtin.file:
-            paths: "{{ item.path }}"
+            path: "{{ item.path }}"
            mode: 0640
-        register: logfiles
+        loop: "{{ logfiles.files }}"
+        loop_control:
+            label: "{{ item.path }}"
  when:
      - rhel9cis_rule_4_2_3
  tags: