sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

updated

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-03-30 11:22:30 +01:00
parent dc5f71d461
commit 8c79bfe7fb
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB
25 changed files with 253 additions and 266 deletions
Download patch file Download diff file Expand all files Collapse all files

14
tasks/section_1/cis_1.2.x.yml
View file

@ -3,14 +3,14 @@
- name: "1.2.1 | PATCH | Ensure Red Hat Subscription Manager connection is configured"
redhat_subscription:
state: present
username: "{{ rhel8cis_rh_sub_user }}"
password: "{{ rhel8cis_rh_sub_password }}"
username: "{{ rhel9cis_rh_sub_user }}"
password: "{{ rhel9cis_rh_sub_password }}"
auto_attach: true
no_log: true
when:
- ansible_distribution == "RedHat"
- rhel8cis_rhnsd_required
- rhel8cis_rule_1_2_1
- rhel9cis_rhnsd_required
- rhel9cis_rule_1_2_1
tags:
- level1-server
- level1-workstation
@ -22,7 +22,7 @@
- name: "1.2.2 | AUDIT | Ensure GPG keys are configured"
command: gpg --quiet --with-fingerprint "{{ rpm_gpg_key }}"
when:
- rhel8cis_rule_1_2_2
- rhel9cis_rule_1_2_2
- ansible_distribution == "RedHat" or
ansible_distribution == "Rocky"
tags:
@ -51,7 +51,7 @@
loop_control:
label: "{{ item.path }}"
when:
- rhel8cis_rule_1_2_3
- rhel9cis_rule_1_2_3
tags:
- level1-server
- level1-workstation
@ -76,7 +76,7 @@
- "Alert! Below are the configured repos. Please review and make sure all align with site policy"
- "{{ dnf_configured.stdout_lines }}"
when:
- rhel8cis_rule_1_2_4
- rhel9cis_rule_1_2_4
tags:
- level1-server
- level1-workstation