sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

lint updates

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-01-20 11:25:53 +00:00
parent 0df5481788
commit 900d0f8d8e
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
1 changed files with 20 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

40
tasks/section_1/cis_1.8.x.yml
View file

@ -124,19 +124,19 @@
block: block:
- name: "1.8.5 | PATCH | Ensure GDM screen locks cannot be overridden | make lock directory" - name: "1.8.5 | PATCH | Ensure GDM screen locks cannot be overridden | make lock directory"
ansible.builtin.file: ansible.builtin.file:
path: "/etc/dconf/db/{{ rhel9cis_dconf_db_name }}.d/locks" path: "/etc/dconf/db/{{ rhel9cis_dconf_db_name }}.d/locks"
owner: root owner: root
group: root group: root
mode: 0755 mode: 0755
state: directory state: directory
- name: "1.8.5 | PATCH | Ensure GDM screen locks cannot be overridden | make lockfile" - name: "1.8.5 | PATCH | Ensure GDM screen locks cannot be overridden | make lockfile"
ansible.builtin.template: ansible.builtin.template:
src: etc/dconf/db/00-screensaver_lock.j2 src: etc/dconf/db/00-screensaver_lock.j2
dest: "/etc/dconf/db/{{ rhel9cis_dconf_db_name }}.d/locks/00-screensaver" dest: "/etc/dconf/db/{{ rhel9cis_dconf_db_name }}.d/locks/00-screensaver"
owner: root owner: root
group: root group: root
mode: 0644 mode: 0644
notify: Reload dconf notify: Reload dconf
when: when:
- rhel9cis_rule_1_8_5 - rhel9cis_rule_1_8_5
@ -226,19 +226,19 @@
block: block:
- name: "1.8.9 | PATCH | Ensure GDM autorun-never is not overridden | Make lock directory" - name: "1.8.9 | PATCH | Ensure GDM autorun-never is not overridden | Make lock directory"
ansible.builtin.file: ansible.builtin.file:
path: "/etc/dconf/db/{{ rhel9cis_dconf_db_name }}.d/locks" path: "/etc/dconf/db/{{ rhel9cis_dconf_db_name }}.d/locks"
owner: root owner: root
group: root group: root
mode: 0755 mode: 0755
state: directory state: directory
- name: "1.8.9 | PATCH | Ensure GDM autorun-never is not overridden | Make lockfile" - name: "1.8.9 | PATCH | Ensure GDM autorun-never is not overridden | Make lockfile"
ansible.builtin.template: ansible.builtin.template:
src: etc/dconf/db/00-autorun_lock.j2 src: etc/dconf/db/00-autorun_lock.j2
dest: "/etc/dconf/db/{{ rhel9cis_dconf_db_name }}.d/locks/00-autorun_lock" dest: "/etc/dconf/db/{{ rhel9cis_dconf_db_name }}.d/locks/00-autorun_lock"
owner: root owner: root
group: root group: root
mode: 0644 mode: 0644
notify: Reload dconf notify: Reload dconf
when: when:
- rhel9cis_rule_1_8_9 - rhel9cis_rule_1_8_9