diff --git a/tasks/section_1/cis_1.6.1.x.yml b/tasks/section_1/cis_1.6.1.x.yml index 6c52535..f05143c 100644 --- a/tasks/section_1/cis_1.6.1.x.yml +++ b/tasks/section_1/cis_1.6.1.x.yml @@ -14,7 +14,7 @@ - name: "1.6.1.2 | PATCH | Ensure SELinux is not disabled in bootloader configuration" ansible.builtin.replace: - dest: /etc/default/grub + path: /etc/default/grub regexp: '{{ item }}' replace: '' loop: diff --git a/tasks/section_4/cis_4.1.1.x.yml b/tasks/section_4/cis_4.1.1.x.yml index c430f2d..a8be25f 100644 --- a/tasks/section_4/cis_4.1.1.x.yml +++ b/tasks/section_4/cis_4.1.1.x.yml @@ -33,7 +33,7 @@ - name: "4.1.1.2 | PATCH | Ensure auditing for processes that start prior to auditd is enabled | Replace existing setting" ansible.builtin.replace: - dest: /etc/default/grub + path: /etc/default/grub regexp: 'audit=.' replace: 'audit=1' notify: Grub2cfg @@ -67,7 +67,7 @@ - name: "4.1.1.3 | PATCH | Ensure audit_backlog_limit is sufficient | Replace existing setting" ansible.builtin.replace: - dest: /etc/default/grub + path: /etc/default/grub regexp: 'audit_backlog_limit=\d+' replace: 'audit_backlog_limit={{ rhel9cis_audit_back_log_limit }}' notify: Grub2cfg