sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

updated comments

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-03-10 15:19:52 +00:00
parent 5e5174a5b0
commit 945fe54fe4
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
4 changed files with 13 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
templates/audit/98_auditd_exception.rules.j2
View file

@ -1,4 +1,7 @@
## This file is managed by Ansible, YOUR CHANGES WILL BE LOST! ## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
### YOUR CHANGES WILL BE LOST!
# This file contains users whose actions are not logged by auditd # This file contains users whose actions are not logged by auditd
{% if rhel9cis_allow_auditd_uid_user_exclusions %} {% if rhel9cis_allow_auditd_uid_user_exclusions %}

5
templates/audit/99_auditd.rules.j2
View file

@ -1,4 +1,7 @@
## This file is managed by Ansible, YOUR CHANGES WILL BE LOST! ## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
### YOUR CHANGES WILL BE LOST!
# This template will set all of the auditd configurations via a handler in the role in one task instead of individually # This template will set all of the auditd configurations via a handler in the role in one task instead of individually
{% if rhel9cis_rule_4_1_3_1 %} {% if rhel9cis_rule_4_1_3_1 %}

5
templates/etc/cron.d/aide.cron.j2
View file

@ -1,5 +1,8 @@
# Run AIDE integrity check # Run AIDE integrity check
## This file is managed by Ansible, YOUR CHANGES WILL BE LOST! ## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC
### YOUR CHANGES WILL BE LOST!
# CIS 1.3.2 # CIS 1.3.2
{{ rhel9cis_aide_cron['aide_minute'] }} {{ rhel9cis_aide_cron['aide_hour'] }} {{ rhel9cis_aide_cron['aide_month'] }} {{ rhel9cis_aide_cron['aide_weekday'] }} {{ rhel9cis_aide_cron['aide_job'] }} {{ rhel9cis_aide_cron['aide_minute'] }} {{ rhel9cis_aide_cron['aide_hour'] }} {{ rhel9cis_aide_cron['aide_month'] }} {{ rhel9cis_aide_cron['aide_weekday'] }} {{ rhel9cis_aide_cron['aide_job'] }}

2
templates/etc/dconf/db/gdm.d/01-banner-message.j2
View file

@ -1,5 +1,5 @@
## Ansible controlled file ## Ansible controlled file
# Added as part of CIS # Added as part of ansible-lockdown CIS baseline
# provided by MindPointGroup LLC # provided by MindPointGroup LLC
[org/gnome/login-screen] [org/gnome/login-screen]