sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

lint

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2023-01-26 12:10:10 +00:00
parent e61ef2c1a6
commit e59e72e3d1
No known key found for this signature in database
GPG key ID: 1DE02A772D0908F9
2 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
tasks/section_3/cis_3.1.x.yml
View file

@ -63,8 +63,8 @@
owner: root owner: root
group: root group: root
loop: loop:
- tipc - tipc
# note the item used in the template # note the item used in the template
- name: "3.1.3 | PATCH | Ensure TIPC is disabled | blacklist" - name: "3.1.3 | PATCH | Ensure TIPC is disabled | blacklist"
ansible.builtin.lineinfile: ansible.builtin.lineinfile:

8
tasks/section_3/cis_3.4.1.x.yml
View file

@ -22,7 +22,7 @@
name: "{{ item }}" name: "{{ item }}"
masked: true masked: true
loop: loop:
- firewalld - firewalld
when: when:
- item in ansible_facts.packages - item in ansible_facts.packages
- rhel9cis_firewall == 'nftables' - rhel9cis_firewall == 'nftables'
@ -32,15 +32,15 @@
name: "{{ item }}" name: "{{ item }}"
masked: true masked: true
loop: loop:
- nftables - nftables
when: when:
- item in ansible_facts.packages - item in ansible_facts.packages
- rhel9cis_firewall == 'firewalld' - rhel9cis_firewall == 'firewalld'
- name: "3.4.1.2 | PATCH | Ensure a single firewall configuration utility is in use | package installed" - name: "3.4.1.2 | PATCH | Ensure a single firewall configuration utility is in use | package installed"
ansible.builtin.package: ansible.builtin.package:
name: "{{ rhel9cis_firewall }}" name: "{{ rhel9cis_firewall }}"
state: installed state: installed
- name: "3.4.1.2 | PATCH | Ensure a single firewall configuration utility is in use | {{ rhel9cis_firewall }} started and enabled" - name: "3.4.1.2 | PATCH | Ensure a single firewall configuration utility is in use | {{ rhel9cis_firewall }} started and enabled"
ansible.builtin.systemd: ansible.builtin.systemd: