From fb73b18596f3d5ad19ee11800e0931bc6defd132 Mon Sep 17 00:00:00 2001 From: Mark Bolwell Date: Wed, 22 Jan 2025 08:53:02 +0000 Subject: [PATCH] Add new pwquality dicovery & title update Signed-off-by: Mark Bolwell --- tasks/prelim.yml | 15 ++++++++++++--- 1 file changed, 12 insertions(+), 3 deletions(-) diff --git a/tasks/prelim.yml b/tasks/prelim.yml index 6602d28..5695843 100644 --- a/tasks/prelim.yml +++ b/tasks/prelim.yml @@ -177,14 +177,14 @@ ansible.builtin.set_fact: grub2_path: /etc/grub2-efi.cfg -- name: "PRELIM | Discover Gnome Desktop Environment" +- name: "PRELIM | AUDIT | Discover Gnome Desktop Environment" tags: - always ansible.builtin.stat: path: /usr/share/gnome/gnome-version.xml register: prelim_gnome_present -- name: "PRELIM | Install dconf if gui installed" +- name: "PRELIM | PATCH | Install dconf if gui installed" when: - rhel9cis_gui tags: @@ -243,6 +243,15 @@ mode: 'go-rwx' state: touch +- name: "PRELIM | AUDIT | Capture pam secuirty related files" + tags: always + ansible.builtin.find: + paths: + - /etc/security/pwquality.conf.d/ + - /etc/pam.d/ + patterns: '*-auth,*.conf' + register: prelim_pam_pwquality_confs + - name: "PRELIM | AUDIT | Gather UID 0 accounts other than root" when: rhel9cis_rule_5_4_2_1 tags: @@ -326,7 +335,7 @@ changed_when: false register: prelim_uid_max_id - - name: "PRELIM | AUDIT | set_facts for interactive uid/gid" + - name: "PRELIM | AUDIT | Set Fact for interactive uid/gid" ansible.builtin.set_fact: prelim_min_int_uid: "{{ prelim_uid_min_id.stdout }}" prelim_max_int_uid: "{{ prelim_uid_max_id.stdout }}"