UBUNTU24-CIS/tasks/section_1/cis_1.2.2.x.yml

23 lines
827 B
YAML

---
- name: "1.2.2.1 | PATCH | Ensure updates, patches, and additional security software are installed"
when: ubtu24cis_rule_1_2_2_1
tags:
- level1-server
- level1-workstation
- patch
- rule_1.2.2.1
- NIST800-53R5_SI-2
- patch
block:
- name: "1.2.2.1 | PATCH | Ensure updates, patches, and additional security software are installedi | Update"
ansible.builtin.package:
name: "*"
state: latest
register: discovered_pkg_updates
# Resetting connection as ssh stops if patched reset connection kickstarts it
- name: "1.2.2.1 | PATCH | Ensure updates, patches, and additional security software are installed | reset ansible connection if ssh updated"
when: "'openssh-server' in discovered_pkg_updates.stdout"
ansible.builtin.meta: reset_connection