Merge pull request #3 from ansible-lockdown/2.2_control_updates

2.2 control updates
This commit is contained in:
uk-bolly 2024-09-26 13:25:08 +01:00 committed by GitHub
commit edc2819272
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 8 additions and 4 deletions

View File

@ -165,7 +165,7 @@
- name: Auditd rules reload - name: Auditd rules reload
when: when:
- not prelim_auditd_immutable_check or - not prelim_auditd_immutable_check or
'"No change" not in ubtu24cis_rule_4_1_3_21_augen_check.stdout' '"No change" not in ubtu24cis_rule_6_2_3_21_grep -iR augen_check.stdout'
ansible.builtin.shell: augenrules --load ansible.builtin.shell: augenrules --load
- name: Audit_immutable_fact - name: Audit_immutable_fact

View File

@ -1,6 +1,6 @@
--- ---
- name: "POST | AUDITD | Apply auditd template for section 4.1.3.x" - name: "POST | AUDITD | Apply auditd template for section 6.2.4.x"
when: update_audit_template when: update_audit_template
ansible.builtin.template: ansible.builtin.template:
src: audit/99_auditd.rules.j2 src: audit/99_auditd.rules.j2

View File

@ -61,7 +61,9 @@
- NIST800-53R5_CM-11 - NIST800-53R5_CM-11
- telnet - telnet
ansible.builtin.package: ansible.builtin.package:
name: telnet name:
- telnet
- inetutils-telnet
state: absent state: absent
purge: "{{ ubtu24cis_purge_apt }}" purge: "{{ ubtu24cis_purge_apt }}"
@ -94,6 +96,8 @@
- NIST800-53R5_CM-11 - NIST800-53R5_CM-11
- ftp - ftp
ansible.builtin.package: ansible.builtin.package:
name: ftp name:
- ftp
- tnftp
state: absent state: absent
purge: "{{ ubtu24cis_purge_apt }}" purge: "{{ ubtu24cis_purge_apt }}"