forked from ansible-lockdown/RHEL9-CIS
Merge pull request #367 from siemens/siemens/rhel9_v2_fixing_inconsistencies
Fixing minor inconsistencies
This commit is contained in:
commit
feb183553c
6 changed files with 7 additions and 7 deletions
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
- name: "1/.1 | PATCH | Ensure /var/log is a separate partition"
|
- name: "1.1.2.6.1 | PATCH | Ensure /var/log is a separate partition"
|
||||||
when:
|
when:
|
||||||
- rhel9cis_rule_1_1_2_6_1
|
- rhel9cis_rule_1_1_2_6_1
|
||||||
- required_mount not in prelim_mount_names
|
- required_mount not in prelim_mount_names
|
||||||
|
|
|
||||||
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
- name: "1/.1 | PATCH | Ensure /var/log/audit is a separate partition"
|
- name: "1.1.2.7.1 | PATCH | Ensure /var/log/audit is a separate partition"
|
||||||
when:
|
when:
|
||||||
- rhel9cis_rule_1_1_2_7_1
|
- rhel9cis_rule_1_1_2_7_1
|
||||||
- required_mount not in prelim_mount_names
|
- required_mount not in prelim_mount_names
|
||||||
|
|
|
||||||
|
|
@ -41,7 +41,7 @@
|
||||||
file: cis_1.2.2.x.yml
|
file: cis_1.2.2.x.yml
|
||||||
|
|
||||||
- name: "SECTION | 1.3.1 | Configure SELinux"
|
- name: "SECTION | 1.3.1 | Configure SELinux"
|
||||||
ansible.builtin.include_tasks:
|
ansible.builtin.import_tasks:
|
||||||
file: cis_1.3.1.x.yml
|
file: cis_1.3.1.x.yml
|
||||||
|
|
||||||
- name: "SECTION | 1.4 | Configure Bootloader"
|
- name: "SECTION | 1.4 | Configure Bootloader"
|
||||||
|
|
|
||||||
|
|
@ -240,12 +240,12 @@
|
||||||
- rule_3.3.9
|
- rule_3.3.9
|
||||||
- NIST800-53R5_AU-3
|
- NIST800-53R5_AU-3
|
||||||
block:
|
block:
|
||||||
- name: "3.3.4 | PATCH | Ensure suspicious packets are logged | Set Fact"
|
- name: "3.3.9 | PATCH | Ensure suspicious packets are logged | Set Fact"
|
||||||
ansible.builtin.set_fact:
|
ansible.builtin.set_fact:
|
||||||
rhel9cis_sysctl_update: true
|
rhel9cis_sysctl_update: true
|
||||||
rhel9cis_flush_ipv4_route: true
|
rhel9cis_flush_ipv4_route: true
|
||||||
|
|
||||||
- name: "3.3.4 | PATCH | Ensure suspicious packets are logged"
|
- name: "3.3.9 | PATCH | Ensure suspicious packets are logged"
|
||||||
ansible.builtin.debug:
|
ansible.builtin.debug:
|
||||||
msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/60-netipv4_sysctl.conf"
|
msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/60-netipv4_sysctl.conf"
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -61,7 +61,7 @@
|
||||||
- level1-server
|
- level1-server
|
||||||
- level1-workstation
|
- level1-workstation
|
||||||
- patch
|
- patch
|
||||||
- rule_5.4.2.2
|
- rule_5.4.2.3
|
||||||
- user
|
- user
|
||||||
- system
|
- system
|
||||||
- NIST800-53R5_CM-1
|
- NIST800-53R5_CM-1
|
||||||
|
|
|
||||||
|
|
@ -27,9 +27,9 @@
|
||||||
- level2-workstation
|
- level2-workstation
|
||||||
- patch
|
- patch
|
||||||
- auditd
|
- auditd
|
||||||
- rule_6.3.4.1
|
|
||||||
- rule_6.3.4.2
|
- rule_6.3.4.2
|
||||||
- rule_6.3.4.3
|
- rule_6.3.4.3
|
||||||
|
- rule_6.3.4.4
|
||||||
- NIST800-53R5_AU-3
|
- NIST800-53R5_AU-3
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
path: "{{ prelim_auditd_logfile.stdout }}"
|
path: "{{ prelim_auditd_logfile.stdout }}"
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue