forked from ansible-lockdown/RHEL9-CIS
93 lines
2 KiB
YAML
93 lines
2 KiB
YAML
---
|
|
|
|
- name: "1.7.1 | PATCH | Ensure message of the day is configured properly"
|
|
ansible.builtin.template:
|
|
src: etc/motd.j2
|
|
dest: /etc/motd
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
when:
|
|
- rhel9cis_rule_1_7_1
|
|
tags:
|
|
- level1-server
|
|
- level1-workstation
|
|
- banner
|
|
- patch
|
|
- rule_1.7.1
|
|
|
|
- name: "1.7.2 | PATCH | Ensure local login warning banner is configured properly"
|
|
ansible.builtin.template:
|
|
src: etc/issue.j2
|
|
dest: /etc/issue
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
when:
|
|
- rhel9cis_rule_1_7_2
|
|
tags:
|
|
- level1-server
|
|
- level1-workstation
|
|
- patch
|
|
- rule_1.7.2
|
|
|
|
- name: "1.7.3 | PATCH | Ensure remote login warning banner is configured properly"
|
|
ansible.builtin.template:
|
|
src: etc/issue.net.j2
|
|
dest: /etc/issue.net
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
when:
|
|
- rhel9cis_rule_1_7_3
|
|
tags:
|
|
- level1-server
|
|
- level1-workstation
|
|
- banner
|
|
- patch
|
|
- rule_1.7.3
|
|
|
|
- name: "1.7.4 | PATCH | Ensure permissions on /etc/motd are configured"
|
|
ansible.builtin.file:
|
|
dest: /etc/motd
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
when:
|
|
- rhel9cis_rule_1_7_4
|
|
tags:
|
|
- level1-server
|
|
- level1-workstation
|
|
- perms
|
|
- patch
|
|
- rule_1.7.4
|
|
|
|
- name: "1.7.5 | PATCH | Ensure permissions on /etc/issue are configured"
|
|
ansible.builtin.file:
|
|
dest: /etc/issue
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
when:
|
|
- rhel9cis_rule_1_7_5
|
|
tags:
|
|
- level1-server
|
|
- level1-workstation
|
|
- perms
|
|
- patch
|
|
- rule_1.7.5
|
|
|
|
- name: "1.7.6 | PATCH | Ensure permissions on /etc/issue.net are configured"
|
|
ansible.builtin.file:
|
|
dest: /etc/issue.net
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
when:
|
|
- rhel9cis_rule_1_7_6
|
|
tags:
|
|
- level1-server
|
|
- level1-workstation
|
|
- perms
|
|
- patch
|
|
- rule_1.7.6
|