forked from ansible-lockdown/RHEL9-CIS
39 lines
1.1 KiB
YAML
39 lines
1.1 KiB
YAML
---
|
|
|
|
# Access, Authentication, and Authorization
|
|
|
|
- name: "SECTION | 5.1 | Configure time-based job schedulers"
|
|
ansible.builtin.import_tasks:
|
|
file: cis_5.1.x.yml
|
|
|
|
- name: "SECTION | 5.2 | Configure SSH Server"
|
|
ansible.builtin.import_tasks:
|
|
file: cis_5.2.x.yml
|
|
when:
|
|
- "'openssh-server' in ansible_facts.packages"
|
|
|
|
- name: "SECTION | 5.3 | Configure privilege escalation"
|
|
ansible.builtin.import_tasks:
|
|
file: cis_5.3.x.yml
|
|
|
|
- name: "SECTION | 5.4 | Configure authselect"
|
|
ansible.builtin.import_tasks:
|
|
file: cis_5.4.x.yml
|
|
|
|
- name: "SECTION | 5.5 | Configure PAM | not authselect"
|
|
ansible.builtin.import_tasks:
|
|
file: cis_5.5.x.yml
|
|
when: not rhel9cis_authselect_custom_profile_select
|
|
|
|
- name: "SECTION | 5.5 | Configure PAM | authselect"
|
|
ansible.builtin.import_tasks:
|
|
file: cis_5.5.x_authselect.yml
|
|
when: rhel9cis_authselect_custom_profile_select
|
|
|
|
- name: "SECTION | 5.6.1.x | Shadow Password Suite Parameters"
|
|
ansible.builtin.import_tasks:
|
|
file: cis_5.6.1.x.yml
|
|
|
|
- name: "SECTION | 5.6.x | Misc. User Account Settings"
|
|
ansible.builtin.import_tasks:
|
|
file: cis_5.6.x.yml
|