5.4.3.2 updated permissions

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
2025-01-10 09:27:23 +00:00 · 2025-01-10 09:27:23 +00:00 · 9709aa503b
parent b7bdc7f67c
commit 9709aa503b
1 changed files with 1 additions and 1 deletions
--- a/tasks/section_5/cis_5.4.3.x.yml
+++ b/tasks/section_5/cis_5.4.3.x.yml
@ -34,7 +34,7 @@
    state: "{{ item.state }}"
    marker: "# {mark} - CIS benchmark - Ansible-lockdown"
    create: true
-    mode: 'go+r'
+    mode: 'go-w'
    block: |
      TMOUT={{ ubtu24cis_shell_session_timeout }}
      readonly TMOUT