Updated logic thanks to @UZziell #40

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-05-12 17:08:31 +01:00 · 2025-05-12 17:08:31 +01:00 · 1ec17228ff
parent fac8eb7e02
commit 1ec17228ff
1 changed files with 2 additions and 2 deletions
--- a/tasks/section_2/cis_2.3.3.x.yml
+++ b/tasks/section_2/cis_2.3.3.x.yml
@ -15,9 +15,9 @@
      ansible.builtin.template:
        src: "{{ item }}.j2"
        dest: "/{{ item }}"
-        mode: 'go-r'
+        mode: 'g=r,o-rwx'
        owner: root
-        group: root
+        group: "{% if ubtu24cis_rule_2_3_3_2 %}_chrony{% else %}root{% endif %}"
      loop:
        - etc/chrony/sources.d/pool.sources
        - etc/chrony/sources.d/server.sources