sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

moved 5.6.6 testing to main task

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-01-27 11:01:41 +00:00
parent 2168a68b4e
commit d770c69aca
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
1 changed files with 2 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

12
tasks/section_5/cis_5.6.x.yml
View file

@ -112,16 +112,8 @@
- rule_5.6.5
- name: "5.6.6 | PATCH | Ensure root password is set"
block:
- name: "5.6.6 | PATCH | Ensure root password is set"
ansible.builtin.shell: passwd -S root | grep "Password set, SHA512 crypt"
changed_when: false
register: root_passwd
- name: "5.6.6 | PATCH | Ensure root password is set"
ansible.builtin.fail:
msg: The root password is not set
when: root_passwd.rc != 0
ansible.builtin.debug:
msg: "The root password has been set as per the assert in early stages"
when:
- rhel9cis_rule_5_6_6
tags: