sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

fix items

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-01-12 15:01:43 +00:00
parent a85902ef2f
commit c129d9af23
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
1 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

14
tasks/section_4/cis_4.2.1.x.yml
View file

@ -190,11 +190,11 @@
regexp: '{{ item }}' regexp: '{{ item }}'
replace: '#\1' replace: '#\1'
notify: restart rsyslog notify: restart rsyslog
with_items: loop:
- '^\$ModLoad imtcp' - '^(\$ModLoad imtcp)'
- '^\$InputTCPServerRun' - '^(\$InputTCPServerRun)'
- '^module\(load="imtcp"\)' - '^(module\(load="imtcp"\))'
- '^input\(type="imtcp" port=.*\)' - '^(input\(type="imtcp")'
when: not rhel9cis_system_is_log_server when: not rhel9cis_system_is_log_server
- name: "4.2.1.7 | PATCH | Ensure rsyslog is not configured to recieve logs from a remote clients. | When log host" - name: "4.2.1.7 | PATCH | Ensure rsyslog is not configured to recieve logs from a remote clients. | When log host"
@ -203,11 +203,11 @@
regexp: '^#(.*{{ item }}.*)' regexp: '^#(.*{{ item }}.*)'
replace: '\1' replace: '\1'
notify: restart rsyslog notify: restart rsyslog
with_items: loop:
- 'ModLoad imtcp' - 'ModLoad imtcp'
- 'InputTCPServerRun' - 'InputTCPServerRun'
- 'module\(load="imtcp"\)' - 'module\(load="imtcp"\)'
- 'input\(type="imtcp" port=".*")' - 'input\(type="imtcp"'
when: rhel9cis_system_is_log_server when: rhel9cis_system_is_log_server
when: when:
- rhel9cis_rule_4_2_1_7 - rhel9cis_rule_4_2_1_7