mirror of
https://github.com/ansible-lockdown/RHEL9-CIS-Audit.git
synced 2026-06-02 02:51:02 +00:00
Mark Bolwell
28 lines
529 B
YAML
28 lines
529 B
YAML
---
|
|
|
|
{{ if .Vars.rhel9cis_level_1 }}
|
|
{{ if .Vars.rhel9cis_rule_5_4_2_3 }}
|
|
command:
|
|
group_root_only_0:
|
|
title: 5.4.2.3 | Ensure group root is the only GID 0 group
|
|
exec: "awk -F: '$3=='0'{print $1\":\"$3}' /etc/group"
|
|
exit-status: 0
|
|
stdout: ['root:0']
|
|
meta:
|
|
server: 1
|
|
workstation: 1
|
|
CIS_ID:
|
|
- 5.4.2.3
|
|
CISv8: NA
|
|
CISv8_IG1: NA
|
|
CISv8_IG2: NA
|
|
CISv8_IG3: NA
|
|
NIST800-53R5:
|
|
- CM-1
|
|
- CM-2
|
|
- CM-6
|
|
- CM-7
|
|
- IA-5
|
|
{{ end }}
|
|
{{ end }}
|