From ebdb8b9129c2c271b8cd33d96fa0a547a092ba00 Mon Sep 17 00:00:00 2001 From: Mark Bolwell Date: Fri, 10 Mar 2023 15:08:12 +0000 Subject: [PATCH] Updated layout Signed-off-by: Mark Bolwell --- tasks/section_4/cis_4.1.4.x.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tasks/section_4/cis_4.1.4.x.yml b/tasks/section_4/cis_4.1.4.x.yml index 5e9ee73..ec3eebd 100644 --- a/tasks/section_4/cis_4.1.4.x.yml +++ b/tasks/section_4/cis_4.1.4.x.yml @@ -8,14 +8,14 @@ block: - name: "4.1.4.1 | AUDIT | Ensure audit log files are mode 0640 or less permissive | discover file" ansible.builtin.shell: grep ^log_file /etc/audit/auditd.conf | awk '{ print $NF }' - register: audit_discovered_logfile changed_when: false + register: audit_discovered_logfile - name: "4.1.4.1 | AUDIT | Ensure audit log files are mode 0640 or less permissive | stat file" ansible.builtin.stat: path: "{{ audit_discovered_logfile.stdout }}" - register: auditd_logfile changed_when: false + register: auditd_logfile - name: | "4.1.4.1 | PATCH | Ensure audit log files are mode 0640 or less permissive"