Skip to content

Commit

Permalink
updated of 6.2.10 inline with control
Browse files Browse the repository at this point in the history
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
  • Loading branch information
uk-bolly committed Nov 12, 2024
1 parent c17c974 commit a48ca0e
Showing 1 changed file with 3 additions and 17 deletions.
20 changes: 3 additions & 17 deletions tasks/section_6/cis_6.2.x.yml
Original file line number Diff line number Diff line change
Expand Up @@ -345,24 +345,10 @@
loop_control:
label: "{{ item.id }}"

# set default ACLs so the homedir has an effective umask of 0027
- name: "6.2.10 | PATCH | Ensure local interactive user home directories exist | Set group ACL"
ansible.posix.acl:
path: "{{ item }}"
default: true
etype: group
permissions: rx
state: present
loop: "{{ discovered_interactive_users_home.stdout_lines }}"
when: not system_is_container

- name: "6.2.10 | PATCH | Ensure local interactive user home directories exist | Set other ACL"
ansible.posix.acl:
- name: "6.2.10 | PATCH | Ensure local interactive user home directories exist | Permissions"
ansible.builtin.file:
path: "{{ item }}"
default: true
etype: other
permissions: 0
state: present
mode: 'g-w,o-rwx'
loop: "{{ discovered_interactive_users_home.stdout_lines }}"
when: not system_is_container

Expand Down

0 comments on commit a48ca0e

Please sign in to comment.