sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

updated test and control

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-09-18 09:51:56 +01:00
parent 7bb4040e04
commit d64414ce9b
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
1 changed files with 12 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

19
tasks/section_1/cis_1.1.8.x.yml
View file

@ -3,18 +3,23 @@
# Skips if mount is absent # Skips if mount is absent
- name: "1.1.8.1 | AUDIT | Ensure /dev/shm is a separate partition" - name: "1.1.8.1 | AUDIT | Ensure /dev/shm is a separate partition"
block: block:
- name: "1.1.8.1 | AUDIT | Ensure /dev/shm is a separate partition | Absent" - name: "1.1.8.1 | AUDIT | Ensure /dev/shm is a separate partition | check exists"
ansible.builtin.debug: ansible.builtin.shell: mount -l | grep -w /dev/shm
msg: "Warning!! {{ required_mount }} doesn't exist. This is a manual task" changed_when: false
register: rhel9cis_1_8_1_1_mount_check
- name: "1.1.8.1 | AUDIT | Ensure separate partition exists for /home | Present" - block:
ansible.builtin.import_tasks: warning_facts.yml - name: "1.1.8.1 | AUDIT | Ensure /dev/shm is a separate partition | Absent"
ansible.builtin.debug:
msg: "Warning!! {{ required_mount }} doesn't exist. This is a manual task"
- name: "1.1.8.1 | AUDIT | Ensure separate partition exists for /home | Present"
ansible.builtin.import_tasks: warning_facts.yml
when: rhel9cis_1_8_1_1_mount_check.rc == 1
vars: vars:
warn_control_id: '1.1.8.1' warn_control_id: '1.1.8.1'
required_mount: '/dev/shm'
when: when:
- required_mount not in mount_names
- rhel9cis_rule_1_1_8_1 - rhel9cis_rule_1_1_8_1
tags: tags:
- level1-server - level1-server