sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

Add new pwquality dicovery & title update

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2025-01-22 08:53:02 +00:00
parent 8b13921b2e
commit fb73b18596
No known key found for this signature in database
GPG key ID: 997FF7FE93AEB5B9
1 changed files with 12 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

15
tasks/prelim.yml
View file

@ -177,14 +177,14 @@
ansible.builtin.set_fact: ansible.builtin.set_fact:
grub2_path: /etc/grub2-efi.cfg grub2_path: /etc/grub2-efi.cfg
- name: "PRELIM | Discover Gnome Desktop Environment" - name: "PRELIM | AUDIT | Discover Gnome Desktop Environment"
tags: tags:
- always - always
ansible.builtin.stat: ansible.builtin.stat:
path: /usr/share/gnome/gnome-version.xml path: /usr/share/gnome/gnome-version.xml
register: prelim_gnome_present register: prelim_gnome_present
- name: "PRELIM | Install dconf if gui installed" - name: "PRELIM | PATCH | Install dconf if gui installed"
when: when:
- rhel9cis_gui - rhel9cis_gui
tags: tags:
@ -243,6 +243,15 @@
mode: 'go-rwx' mode: 'go-rwx'
state: touch state: touch
- name: "PRELIM | AUDIT | Capture pam secuirty related files"
tags: always
ansible.builtin.find:
paths:
- /etc/security/pwquality.conf.d/
- /etc/pam.d/
patterns: '*-auth,*.conf'
register: prelim_pam_pwquality_confs
- name: "PRELIM | AUDIT | Gather UID 0 accounts other than root" - name: "PRELIM | AUDIT | Gather UID 0 accounts other than root"
when: rhel9cis_rule_5_4_2_1 when: rhel9cis_rule_5_4_2_1
tags: tags:
@ -326,7 +335,7 @@
changed_when: false changed_when: false
register: prelim_uid_max_id register: prelim_uid_max_id
- name: "PRELIM | AUDIT | set_facts for interactive uid/gid" - name: "PRELIM | AUDIT | Set Fact for interactive uid/gid"
ansible.builtin.set_fact: ansible.builtin.set_fact:
prelim_min_int_uid: "{{ prelim_uid_min_id.stdout }}" prelim_min_int_uid: "{{ prelim_uid_min_id.stdout }}"
prelim_max_int_uid: "{{ prelim_uid_max_id.stdout }}" prelim_max_int_uid: "{{ prelim_uid_max_id.stdout }}"