sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

replaced dest for path on file module

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-01-26 09:31:27 +00:00
parent 0c460d4b70
commit abd99426b8
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
3 changed files with 21 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

20
tasks/section_5/cis_5.1.x.yml
View file

@ -15,7 +15,7 @@
- name: "5.1.2 | PATCH | Ensure permissions on /etc/crontab are configured"
ansible.builtin.file:
dest: /etc/crontab
path: /etc/crontab
owner: root
group: root
mode: 0600
@ -30,7 +30,7 @@
- name: "5.1.3 | PATCH | Ensure permissions on /etc/cron.hourly are configured"
ansible.builtin.file:
dest: /etc/cron.hourly
path: /etc/cron.hourly
state: directory
owner: root
group: root
@ -46,7 +46,7 @@
- name: "5.1.4 | PATCH | Ensure permissions on /etc/cron.daily are configured"
ansible.builtin.file:
dest: /etc/cron.daily
path: /etc/cron.daily
state: directory
owner: root
group: root
@ -62,7 +62,7 @@
- name: "5.1.5 | PATCH | Ensure permissions on /etc/cron.weekly are configured"
ansible.builtin.file:
dest: /etc/cron.weekly
path: /etc/cron.weekly
state: directory
owner: root
group: root
@ -77,7 +77,7 @@
- name: "5.1.6 | PATCH | Ensure permissions on /etc/cron.monthly are configured"
ansible.builtin.file:
dest: /etc/cron.monthly
path: /etc/cron.monthly
state: directory
owner: root
group: root
@ -92,7 +92,7 @@
- name: "5.1.7 | PATCH | Ensure permissions on /etc/cron.d are configured"
ansible.builtin.file:
dest: /etc/cron.d
path: /etc/cron.d
state: directory
owner: root
group: root
@ -110,7 +110,7 @@
block:
- name: "5.1.8 | PATCH | Ensure cron is restricted to authorized users | Remove cron.deny"
ansible.builtin.file:
dest: /etc/cron.deny
path: /etc/cron.deny
state: absent
- name: "5.1.8 | PATCH | Ensure cron is restricted to authorized users | Check if cron.allow exists"
@ -120,7 +120,7 @@
- name: "5.1.8 | PATCH | Ensure cron is restricted to authorized users | Ensure cron.allow is restricted to authorized users"
ansible.builtin.file:
dest: /etc/cron.allow
path: /etc/cron.allow
state: '{{ "file" if rhel9cis_5_1_8_cron_allow_state.stat.exists else "touch" }}'
owner: root
group: root
@ -138,7 +138,7 @@
block:
- name: "5.1.9 | PATCH | Ensure at is restricted to authorized users | Remove at.deny"
ansible.builtin.file:
dest: /etc/at.deny
path: /etc/at.deny
state: absent
- name: "5.1.9 | PATCH | Ensure at is restricted to authorized users | Check if at.allow exists"
@ -148,7 +148,7 @@
- name: "5.1.9 | PATCH | Ensure at is restricted to authorized users | Ensure at.allow is restricted to authorized users"
ansible.builtin.file:
dest: /etc/at.allow
path: /etc/at.allow
state: '{{ "file" if rhel9cis_5_1_9_at_allow_state.stat.exists else "touch" }}'
owner: root
group: root