Merge pull request #7 from ansible-lockdown/gui_updates

updated for gui discovery and dconf install

defaults/main.yml

@@ -569,7 +569,7 @@ rhel9cis_warning_banner: Authorized uses only. All activity may be monitored and
 
 ## Control 1.8.x - Settings for GDM
 ## 1.8 GDM graphical interface
-rhel9cis_gui: false
+rhel9cis_gui: "{{ prelim_gnome_present.stat.exists | default(false) }}"
 # This variable specifies the GNOME configuration database file to which configurations are written.
 # (See "https://help.gnome.org/admin/system-admin-guide/stable/dconf-keyfiles.html.en")
 # The default database is 'local'.

tasks/prelim.yml

@@ -159,6 +159,22 @@
       ansible.builtin.set_fact:
         grub2_path: /etc/grub2-efi.cfg
 
+- name: "PRELIM | Discover Gnome Desktop Environment"
+  tags:
+      - always
+  ansible.builtin.stat:
+      path: /usr/share/gnome/gnome-version.xml
+  register: prelim_gnome_present
+
+- name: "PRELIM | Install dconf if gui installed"
+  when:
+      - rhel9cis_gui
+  tags:
+      - always
+  ansible.builtin.package:
+      name: dconf
+      state: present
+
 - name: "PRELIM | AUDIT | Wireless adapter pre-requisites"
   when:
     - rhel9cis_rule_3_1_2