mirror of
https://github.com/ansible-lockdown/RHEL9-CIS-Audit.git
synced 2026-06-08 06:04:11 +00:00
@@ -8,7 +8,6 @@ mount:
|
||||
1.1.4.4 | Ensure nodev option set on /var/tmp partition
|
||||
exists: true
|
||||
opts:
|
||||
opts:
|
||||
{{ if .Vars.rhel9cis_rule_1_1_4_2 }}
|
||||
- noexec
|
||||
{{ end }}
|
||||
|
||||
@@ -8,10 +8,8 @@
|
||||
owner: root
|
||||
group: root
|
||||
mode: "0600"
|
||||
{{ if .Vars.rhel9cis_set_boot_pass }}
|
||||
contents:
|
||||
- '/GRUB2_PASSWORD=grub.pbkdf2.sha512.*/'
|
||||
{{ end }}
|
||||
meta:
|
||||
server: 1
|
||||
workstation: 1
|
||||
|
||||
@@ -1,9 +1,10 @@
|
||||
package:
|
||||
{{ if not .Vars.rhel9cis_telnet_required }}
|
||||
{{ if .Vars.rhel9cis_rule_2_3_1 }}
|
||||
talk:
|
||||
telnet:
|
||||
title: 2.3.1 | Ensure telnet client is not installed
|
||||
installed: false
|
||||
name: telnet
|
||||
meta:
|
||||
server: 1
|
||||
workstation: 1
|
||||
@@ -21,6 +22,7 @@ package:
|
||||
openldap-clients:
|
||||
title: 2.3.2 | Ensure LDAP client is not installed
|
||||
installed: false
|
||||
name: openldap-clients
|
||||
meta:
|
||||
server: 1
|
||||
workstation: NA
|
||||
@@ -38,6 +40,7 @@ package:
|
||||
tftp:
|
||||
title: 2.3.3 | Ensure TFTP client is not installed
|
||||
installed: false
|
||||
name: tftp
|
||||
meta:
|
||||
server: 1
|
||||
workstation: NA
|
||||
@@ -52,9 +55,10 @@ package:
|
||||
{{ end }}
|
||||
{{ if not .Vars.rhel9cis_ftp_client }}
|
||||
{{ if .Vars.rhel9cis_rule_2_3_4 }}
|
||||
tftp:
|
||||
vsftp:
|
||||
title: 2.3.4 | Ensure FTP client is not installed
|
||||
installed: false
|
||||
name: ftp
|
||||
meta:
|
||||
server: 1
|
||||
workstation: NA
|
||||
|
||||
Reference in New Issue
Block a user