4
0
Fork 0

replaced dest for path on file module

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-01-26 09:31:27 +00:00
parent 0c460d4b70
commit abd99426b8
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
3 changed files with 21 additions and 21 deletions

View file

@ -49,7 +49,7 @@
- name: "1.7.4 | PATCH | Ensure permissions on /etc/motd are configured"
ansible.builtin.file:
dest: /etc/motd
path: /etc/motd
owner: root
group: root
mode: 0644
@ -64,7 +64,7 @@
- name: "1.7.5 | PATCH | Ensure permissions on /etc/issue are configured"
ansible.builtin.file:
dest: /etc/issue
path: /etc/issue
owner: root
group: root
mode: 0644
@ -79,7 +79,7 @@
- name: "1.7.6 | PATCH | Ensure permissions on /etc/issue.net are configured"
ansible.builtin.file:
dest: /etc/issue.net
path: /etc/issue.net
owner: root
group: root
mode: 0644

View file

@ -15,7 +15,7 @@
- name: "5.1.2 | PATCH | Ensure permissions on /etc/crontab are configured"
ansible.builtin.file:
dest: /etc/crontab
path: /etc/crontab
owner: root
group: root
mode: 0600
@ -30,7 +30,7 @@
- name: "5.1.3 | PATCH | Ensure permissions on /etc/cron.hourly are configured"
ansible.builtin.file:
dest: /etc/cron.hourly
path: /etc/cron.hourly
state: directory
owner: root
group: root
@ -46,7 +46,7 @@
- name: "5.1.4 | PATCH | Ensure permissions on /etc/cron.daily are configured"
ansible.builtin.file:
dest: /etc/cron.daily
path: /etc/cron.daily
state: directory
owner: root
group: root
@ -62,7 +62,7 @@
- name: "5.1.5 | PATCH | Ensure permissions on /etc/cron.weekly are configured"
ansible.builtin.file:
dest: /etc/cron.weekly
path: /etc/cron.weekly
state: directory
owner: root
group: root
@ -77,7 +77,7 @@
- name: "5.1.6 | PATCH | Ensure permissions on /etc/cron.monthly are configured"
ansible.builtin.file:
dest: /etc/cron.monthly
path: /etc/cron.monthly
state: directory
owner: root
group: root
@ -92,7 +92,7 @@
- name: "5.1.7 | PATCH | Ensure permissions on /etc/cron.d are configured"
ansible.builtin.file:
dest: /etc/cron.d
path: /etc/cron.d
state: directory
owner: root
group: root
@ -110,7 +110,7 @@
block:
- name: "5.1.8 | PATCH | Ensure cron is restricted to authorized users | Remove cron.deny"
ansible.builtin.file:
dest: /etc/cron.deny
path: /etc/cron.deny
state: absent
- name: "5.1.8 | PATCH | Ensure cron is restricted to authorized users | Check if cron.allow exists"
@ -120,7 +120,7 @@
- name: "5.1.8 | PATCH | Ensure cron is restricted to authorized users | Ensure cron.allow is restricted to authorized users"
ansible.builtin.file:
dest: /etc/cron.allow
path: /etc/cron.allow
state: '{{ "file" if rhel9cis_5_1_8_cron_allow_state.stat.exists else "touch" }}'
owner: root
group: root
@ -138,7 +138,7 @@
block:
- name: "5.1.9 | PATCH | Ensure at is restricted to authorized users | Remove at.deny"
ansible.builtin.file:
dest: /etc/at.deny
path: /etc/at.deny
state: absent
- name: "5.1.9 | PATCH | Ensure at is restricted to authorized users | Check if at.allow exists"
@ -148,7 +148,7 @@
- name: "5.1.9 | PATCH | Ensure at is restricted to authorized users | Ensure at.allow is restricted to authorized users"
ansible.builtin.file:
dest: /etc/at.allow
path: /etc/at.allow
state: '{{ "file" if rhel9cis_5_1_9_at_allow_state.stat.exists else "touch" }}'
owner: root
group: root

View file

@ -2,7 +2,7 @@
- name: "6.1.1 | PATCH | Ensure permissions on /etc/passwd are configured"
ansible.builtin.file:
dest: /etc/passwd
path: /etc/passwd
owner: root
group: root
mode: 0644
@ -17,7 +17,7 @@
- name: "6.1.2 | PATCH | Ensure permissions on /etc/passwd- are configured"
ansible.builtin.file:
dest: /etc/passwd-
path: /etc/passwd-
owner: root
group: root
mode: 0644
@ -32,7 +32,7 @@
- name: "6.1.3 | PATCH | Ensure permissions on /etc/group are configured"
ansible.builtin.file:
dest: /etc/group-
path: /etc/group-
owner: root
group: root
mode: 0644
@ -47,7 +47,7 @@
- name: "6.1.4 | PATCH | Ensure permissions on /etc/group- are configured"
ansible.builtin.file:
dest: /etc/group-
path: /etc/group-
owner: root
group: root
mode: 0644
@ -62,7 +62,7 @@
- name: "6.1.5 | PATCH | Ensure permissions on /etc/shadow are configured"
ansible.builtin.file:
dest: /etc/shadow
path: /etc/shadow
owner: root
group: root
mode: 0000
@ -77,7 +77,7 @@
- name: "6.1.6 | PATCH | Ensure permissions on /etc/shadow- are configured"
ansible.builtin.file:
dest: /etc/shadow-
path: /etc/shadow-
owner: root
group: root
mode: 0000
@ -92,7 +92,7 @@
- name: "6.1.7 | PATCH | Ensure permissions on /etc/gshadow are configured"
ansible.builtin.file:
dest: /etc/gshadow
path: /etc/gshadow
owner: root
group: root
mode: 0000
@ -107,7 +107,7 @@
- name: "6.1.8 | PATCH | Ensure permissions on /etc/gshadow- are configured"
ansible.builtin.file:
dest: /etc/gshadow-
path: /etc/gshadow-
owner: root
group: root
mode: 0000