added fix for #33 thanks to @WhiteRoseLK

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-12 14:23:56 +01:00 · 2025-05-12 14:23:56 +01:00 · 0347692661
parent d5bad97cad
commit 0347692661
1 changed files with 1 additions and 1 deletions
--- a/tasks/section_2/cis_2.4.1.x.yml
+++ b/tasks/section_2/cis_2.4.1.x.yml
@ -154,5 +154,5 @@
      ansible.builtin.file:
        path: /etc/cron.allow
        owner: root
-        group: root
+        group: '{{ (discovered_cron_allow_status.stat.gr_name == "crontab") | ternary(omit,"root") }}'
        mode: 'u-x,g-wx,o-rwx'