From e6417801680794641426ab87a9b2f14dfc27d070 Mon Sep 17 00:00:00 2001 From: Mark Bolwell Date: Thu, 26 Jan 2023 08:29:30 +0000 Subject: [PATCH] replace module dest -> path Signed-off-by: Mark Bolwell --- tasks/section_1/cis_1.6.1.x.yml | 2 +- tasks/section_4/cis_4.1.1.x.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/tasks/section_1/cis_1.6.1.x.yml b/tasks/section_1/cis_1.6.1.x.yml index 6c52535..f05143c 100644 --- a/tasks/section_1/cis_1.6.1.x.yml +++ b/tasks/section_1/cis_1.6.1.x.yml @@ -14,7 +14,7 @@ - name: "1.6.1.2 | PATCH | Ensure SELinux is not disabled in bootloader configuration" ansible.builtin.replace: - dest: /etc/default/grub + path: /etc/default/grub regexp: '{{ item }}' replace: '' loop: diff --git a/tasks/section_4/cis_4.1.1.x.yml b/tasks/section_4/cis_4.1.1.x.yml index c430f2d..a8be25f 100644 --- a/tasks/section_4/cis_4.1.1.x.yml +++ b/tasks/section_4/cis_4.1.1.x.yml @@ -33,7 +33,7 @@ - name: "4.1.1.2 | PATCH | Ensure auditing for processes that start prior to auditd is enabled | Replace existing setting" ansible.builtin.replace: - dest: /etc/default/grub + path: /etc/default/grub regexp: 'audit=.' replace: 'audit=1' notify: Grub2cfg @@ -67,7 +67,7 @@ - name: "4.1.1.3 | PATCH | Ensure audit_backlog_limit is sufficient | Replace existing setting" ansible.builtin.replace: - dest: /etc/default/grub + path: /etc/default/grub regexp: 'audit_backlog_limit=\d+' replace: 'audit_backlog_limit={{ rhel9cis_audit_back_log_limit }}' notify: Grub2cfg