4
0
Fork 0

Merge pull request #367 from siemens/siemens/rhel9_v2_fixing_inconsistencies

Fixing minor inconsistencies
This commit is contained in:
uk-bolly 2025-07-18 14:34:22 +01:00 committed by GitHub
commit feb183553c
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
6 changed files with 7 additions and 7 deletions

View file

@ -1,6 +1,6 @@
--- ---
- name: "1/.1 | PATCH | Ensure /var/log is a separate partition" - name: "1.1.2.6.1 | PATCH | Ensure /var/log is a separate partition"
when: when:
- rhel9cis_rule_1_1_2_6_1 - rhel9cis_rule_1_1_2_6_1
- required_mount not in prelim_mount_names - required_mount not in prelim_mount_names

View file

@ -1,6 +1,6 @@
--- ---
- name: "1/.1 | PATCH | Ensure /var/log/audit is a separate partition" - name: "1.1.2.7.1 | PATCH | Ensure /var/log/audit is a separate partition"
when: when:
- rhel9cis_rule_1_1_2_7_1 - rhel9cis_rule_1_1_2_7_1
- required_mount not in prelim_mount_names - required_mount not in prelim_mount_names

View file

@ -41,7 +41,7 @@
file: cis_1.2.2.x.yml file: cis_1.2.2.x.yml
- name: "SECTION | 1.3.1 | Configure SELinux" - name: "SECTION | 1.3.1 | Configure SELinux"
ansible.builtin.include_tasks: ansible.builtin.import_tasks:
file: cis_1.3.1.x.yml file: cis_1.3.1.x.yml
- name: "SECTION | 1.4 | Configure Bootloader" - name: "SECTION | 1.4 | Configure Bootloader"

View file

@ -240,12 +240,12 @@
- rule_3.3.9 - rule_3.3.9
- NIST800-53R5_AU-3 - NIST800-53R5_AU-3
block: block:
- name: "3.3.4 | PATCH | Ensure suspicious packets are logged | Set Fact" - name: "3.3.9 | PATCH | Ensure suspicious packets are logged | Set Fact"
ansible.builtin.set_fact: ansible.builtin.set_fact:
rhel9cis_sysctl_update: true rhel9cis_sysctl_update: true
rhel9cis_flush_ipv4_route: true rhel9cis_flush_ipv4_route: true
- name: "3.3.4 | PATCH | Ensure suspicious packets are logged" - name: "3.3.9 | PATCH | Ensure suspicious packets are logged"
ansible.builtin.debug: ansible.builtin.debug:
msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/60-netipv4_sysctl.conf" msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/60-netipv4_sysctl.conf"

View file

@ -61,7 +61,7 @@
- level1-server - level1-server
- level1-workstation - level1-workstation
- patch - patch
- rule_5.4.2.2 - rule_5.4.2.3
- user - user
- system - system
- NIST800-53R5_CM-1 - NIST800-53R5_CM-1

View file

@ -27,9 +27,9 @@
- level2-workstation - level2-workstation
- patch - patch
- auditd - auditd
- rule_6.3.4.1
- rule_6.3.4.2 - rule_6.3.4.2
- rule_6.3.4.3 - rule_6.3.4.3
- rule_6.3.4.4
- NIST800-53R5_AU-3 - NIST800-53R5_AU-3
ansible.builtin.file: ansible.builtin.file:
path: "{{ prelim_auditd_logfile.stdout }}" path: "{{ prelim_auditd_logfile.stdout }}"