forked from ansible-lockdown/RHEL9-CIS
yamllint
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
8361791c51
commit
91600af889
4 changed files with 7 additions and 8 deletions
|
|
@ -55,7 +55,7 @@
|
|||
when:
|
||||
- rhel9cis_set_boot_pass
|
||||
- rhel9cis_rule_1_4_1
|
||||
tags:
|
||||
tags:
|
||||
- always
|
||||
|
||||
- name: "check sugroup exists if used"
|
||||
|
|
|
|||
|
|
@ -31,7 +31,7 @@
|
|||
package:
|
||||
name: iptables-services
|
||||
state: absent
|
||||
when:
|
||||
when:
|
||||
when:
|
||||
- rhel9cis_rule_3_4_1_2
|
||||
- "'iptables-services' in ansible_facts.packages"
|
||||
|
|
|
|||
|
|
@ -18,4 +18,3 @@
|
|||
include_tasks: cis_3.4.2.x.yml
|
||||
when:
|
||||
- rhel9cis_firewall == "nftables"
|
||||
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@
|
|||
|
||||
- name: "4.3.1 | PATCH | Ensure logrotate is installed"
|
||||
package:
|
||||
name: rsyslog-logrotate
|
||||
state: present
|
||||
name: rsyslog-logrotate
|
||||
state: present
|
||||
when:
|
||||
- rhel9cis_rule_4_3_1
|
||||
tags:
|
||||
|
|
@ -16,9 +16,9 @@
|
|||
|
||||
- name: "4.3.2 | PATCH | Ensure logrotate is running and enabled"
|
||||
systemd:
|
||||
name: logrotate
|
||||
state: started
|
||||
enabled: true
|
||||
name: logrotate
|
||||
state: started
|
||||
enabled: true
|
||||
when:
|
||||
- rhel9cis_rule_4_3_2
|
||||
tags:
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue