From 9709aa503bc5e26455609a404946ea7408e22e77 Mon Sep 17 00:00:00 2001
From: Mark Bolwell <mark.bollyuk@gmail.com>
Date: Fri, 10 Jan 2025 09:27:23 +0000
Subject: [PATCH] 5.4.3.2 updated permissions

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
---
 tasks/section_5/cis_5.4.3.x.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tasks/section_5/cis_5.4.3.x.yml b/tasks/section_5/cis_5.4.3.x.yml
index 2272c82..2ea9c2f 100644
--- a/tasks/section_5/cis_5.4.3.x.yml
+++ b/tasks/section_5/cis_5.4.3.x.yml
@@ -34,7 +34,7 @@
     state: "{{ item.state }}"
     marker: "# {mark} - CIS benchmark - Ansible-lockdown"
     create: true
-    mode: 'go+r'
+    mode: 'go-w'
     block: |
       TMOUT={{ ubtu24cis_shell_session_timeout }}
       readonly TMOUT