adjust for crontab group on cron.allow issue #33

Signed-off-by: George Nalen <georgen@mindpointgroup.com>
2025-04-17 16:39:08 -05:00 · 2025-04-17 16:39:08 -05:00 · 5445766fe2
parent f90b698a57
commit 5445766fe2
1 changed files with 1 additions and 1 deletions
--- a/tasks/section_2/cis_2.4.1.x.yml
+++ b/tasks/section_2/cis_2.4.1.x.yml
@ -154,5 +154,5 @@
      ansible.builtin.file:
        path: /etc/cron.allow
        owner: root
-        group: root
+        group: '{{ ("crontab" in discovered_cron_allow_status.stat.gr_name ) | ternary(omit,"root") }}'
        mode: 'u-x,g-wx,o-rwx'