sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

Updated mountpoint vars correctly

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2024-12-11 10:09:31 +00:00
parent 7875e1f6b5
commit d850fc5875
No known key found for this signature in database
GPG key ID: 997FF7FE93AEB5B9
8 changed files with 58 additions and 58 deletions
Download patch file Download diff file Expand all files Collapse all files

12
tasks/section_1/cis_1.1.2.3.x.yml
View file

@ -2,7 +2,7 @@
- name: "1.1.2.3.1 | PATCH | Ensure /home is a separate partition"
when:
- rhel9cis_rule_1_1_2_3_1
- required_mount not in mount_names
- required_mount not in prelim_mount_names
tags:
- level1-server
- level1-workstation
@ -32,7 +32,7 @@
- name: "1.1.2.3.2 | PATCH | Ensure nodev option set on /home partition"
when:
- mount_point_fs_and_options[mount_point] is defined
- prelim_mount_point_fs_and_options[mount_point] is defined
- rhel9cis_rule_1_1_2_3_2
tags:
- level1-server
@ -48,14 +48,14 @@
notify: &mount_option_notify
- "Remount {{ mount_point }}"
ansible.builtin.set_fact: &mount_option_set_fact
mount_point_fs_and_options: |
{{ mount_point_fs_and_options | combine({mount_point: {'options': (mount_point_fs_and_options[mount_point]['options'] + [required_option])}}, recursive=True) }}
prelim_mount_point_fs_and_options: |
{{ prelim_mount_point_fs_and_options | combine({mount_point: {'options': (prelim_mount_point_fs_and_options[mount_point]['options'] + [required_option])}}, recursive=True) }}
changed_when: &mount_option_changed_when
- required_option not in mount_point_fs_and_options[mount_point]['original_options']
- required_option not in prelim_mount_point_fs_and_options[mount_point]['original_options']
- name: "1.1.2.3.3 | PATCH | Ensure nosuid option set on /home partition"
when:
- mount_point_fs_and_options[mount_point] is defined
- prelim_mount_point_fs_and_options[mount_point] is defined
- rhel9cis_rule_1_1_2_3_3
tags:
- level1-server