sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

lint updates

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2025-04-01 08:14:02 +01:00
parent 9bbf5b7a81
commit bd425a068d
No known key found for this signature in database
GPG key ID: 997FF7FE93AEB5B9
3 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

6
tasks/main.yml
View file

@ -116,7 +116,7 @@
fail_msg: "You still have the default name for your authselect profile" fail_msg: "You still have the default name for your authselect profile"
- name: "Check authselect profile is selected | Check current profile" - name: "Check authselect profile is selected | Check current profile"
ansible.builtin.shell: authselect list ansible.builtin.command: authselect list
changed_when: false changed_when: false
failed_when: prelim_authselect_current_profile.rc not in [ 0, 1 ] failed_when: prelim_authselect_current_profile.rc not in [ 0, 1 ]
register: prelim_authselect_current_profile register: prelim_authselect_current_profile
@ -216,8 +216,8 @@
- name: Add ansible file showing Benchmark and levels applied - name: Add ansible file showing Benchmark and levels applied
when: create_benchmark_facts when: create_benchmark_facts
tags: tags:
- always - always
- benchmark - benchmark
block: block:
- name: Create ansible facts directory - name: Create ansible facts directory
ansible.builtin.file: ansible.builtin.file:

2
tasks/section_1/cis_1.4.x.yml
View file

@ -57,7 +57,7 @@
- name: "1.4.2 | PATCH | Ensure permissions on bootloader config are configured | efi based system | Build Options" - name: "1.4.2 | PATCH | Ensure permissions on bootloader config are configured | efi based system | Build Options"
when: item not in discovered_efi_fstab.stdout when: item not in discovered_efi_fstab.stdout
ansible.builtin.set_fact: ansible.builtin.set_fact:
efi_mount_opts_addition: "{{ efi_mount_opts_addition + ',' + item }}" efi_mount_opts_addition: "{{ efi_mount_opts_addition + ',' + item }}"
loop: "{{ efi_mount_options }}" loop: "{{ efi_mount_options }}"
- name: "1.4.2 | PATCH | Ensure permissions on bootloader config are configured | efi based system | Add mount options" - name: "1.4.2 | PATCH | Ensure permissions on bootloader config are configured | efi based system | Add mount options"

1
tasks/section_6/cis_6.2.1.x.yml
View file

@ -113,4 +113,3 @@
state: stopped state: stopped
enabled: false enabled: false
register: discovered_rsyslog_service register: discovered_rsyslog_service