sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

- Added extra checks in using loop items in when statement

Browse source 
- Fixed typo in handler name

Signed-off-by: Marco V <marco@osp.nl>
This commit is contained in:
c59099 2023-07-19 17:30:54 +02:00 • committed by Marco V
parent 9709779492
commit 9e8ecee964
No known key found for this signature in database
GPG key ID: 9DF01339F71C5EBC
2 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

8
tasks/section_6/cis_6.1.x.yml
View file

@ -164,7 +164,7 @@
ansible.builtin.set_fact:
rhel_09_6_1_10_unowned_files_found: true
loop: "{{ rhel_09_6_1_10_audit.results }}"
when: item.stdout | length > 0
when: item | length > 0 and item.stdout is defined and item.stdout | length > 0
- name: "6.1.10 | AUDIT | Ensure no unowned files or directories exist | Displaying any unowned files or directories"
ansible.builtin.debug:
@ -205,7 +205,7 @@
ansible.builtin.set_fact:
rhel_09_6_1_11_ungrouped_files_found: true
loop: "{{ rhel_09_6_1_11_audit.results }}"
when: item.stdout | length > 0
when: item | length > 0 and item.stdout is defined and item.stdout | length > 0
- name: "6.1.11 | AUDIT | Ensure no ungrouped files or directories exist | Displaying all ungrouped files or directories"
ansible.builtin.debug:
@ -258,7 +258,7 @@
ansible.builtin.set_fact:
rhel9_6_1_13_suid_found: true
loop: "{{ rhel_09_6_1_13_suid_perms.results }}"
when: item.stdout | length > 0
when: item | length > 0 and item.stdout is defined and item.stdout | length > 0
- name: "6.1.13 | AUDIT | Audit SUID executables | Alert SUID executables exist"
ansible.builtin.debug:
@ -297,7 +297,7 @@
ansible.builtin.set_fact:
rhel9_6_1_14_sgid_found: true
loop: "{{ rhel_09_6_1_14_sgid_perms.results }}"
when: item.stdout | length > 0
when: item | length > 0 and item.stdout is defined and item.stdout | length > 0
- name: "6.1.14 | AUDIT | Audit SGID executables | Alert SGID executables exist"
ansible.builtin.debug: