Skip to content

Commit

Permalink
Updated tasks/main.yml
Browse files Browse the repository at this point in the history
  • Loading branch information
@dmc5179
ComplianceAsCode development team authored and dmc5179 committed Feb 8, 2024
1 parent d387e66 commit 972a190
Showing 1 changed file with 24 additions and 16 deletions.
40 changes: 24 additions & 16 deletions tasks/main.yml
View file
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
- name: Find /etc/sudoers.d/ files
find:
ansible.builtin.find:
paths:
- /etc/sudoers.d/
register: sudoers
Expand All @@ -24,7 +24,7 @@
- sudo_remove_no_authenticate | bool

- name: Remove lines containing !authenticate from sudoers files
replace:
ansible.builtin.replace:
regexp: (^(?!#).*[\s]+\!authenticate.*$)
replace: '# \g<1>'
path: '{{ item.path }}'
Expand Down Expand Up @@ -53,7 +53,7 @@
- sudo_remove_no_authenticate | bool

- name: Find /etc/sudoers.d/ files
find:
ansible.builtin.find:
paths:
- /etc/sudoers.d/
register: sudoers
Expand All @@ -78,7 +78,7 @@
- sudo_remove_nopasswd | bool

- name: Remove lines containing NOPASSWD from sudoers files
replace:
ansible.builtin.replace:
regexp: (^(?!#).*[\s]+NOPASSWD[\s]*\:.*$)
replace: '# \g<1>'
path: '{{ item.path }}'
Expand Down Expand Up @@ -418,6 +418,7 @@
- NIST-800-53-SC-12(3)
- NIST-800-53-SI-7
- PCI-DSS-Req-6.2
- PCI-DSSv4-6.3.3
- ensure_redhat_gpgkey_installed
- high_severity
- medium_complexity
Expand Down Expand Up @@ -449,6 +450,7 @@
- NIST-800-53-SC-12(3)
- NIST-800-53-SI-7
- PCI-DSS-Req-6.2
- PCI-DSSv4-6.3.3
- ensure_redhat_gpgkey_installed
- high_severity
- medium_complexity
Expand Down Expand Up @@ -480,6 +482,7 @@
- NIST-800-53-SC-12(3)
- NIST-800-53-SI-7
- PCI-DSS-Req-6.2
- PCI-DSSv4-6.3.3
- ensure_redhat_gpgkey_installed
- high_severity
- medium_complexity
Expand Down Expand Up @@ -509,6 +512,7 @@
- NIST-800-53-SC-12(3)
- NIST-800-53-SI-7
- PCI-DSS-Req-6.2
- PCI-DSSv4-6.3.3
- ensure_redhat_gpgkey_installed
- high_severity
- medium_complexity
Expand Down Expand Up @@ -551,6 +555,7 @@
- NIST-800-53-SC-12(3)
- NIST-800-53-SI-7
- PCI-DSS-Req-6.2
- PCI-DSSv4-6.3.3
- ensure_redhat_gpgkey_installed
- high_severity
- medium_complexity
Expand Down Expand Up @@ -3961,7 +3966,6 @@
- NIST-800-53-IA-5(c)
- PCI-DSS-Req-8.2.3
- PCI-DSSv4-8.3.6
- PCI-DSSv4-8.3.9
- accounts_password_pam_dcredit
- low_complexity
- low_disruption
Expand Down Expand Up @@ -4001,7 +4005,6 @@
- NIST-800-53-IA-5(c)
- PCI-DSS-Req-8.2.3
- PCI-DSSv4-8.3.6
- PCI-DSSv4-8.3.9
- accounts_password_pam_dcredit
- low_complexity
- low_disruption
Expand All @@ -4021,7 +4024,6 @@
- NIST-800-53-IA-5(c)
- PCI-DSS-Req-8.2.3
- PCI-DSSv4-8.3.6
- PCI-DSSv4-8.3.9
- accounts_password_pam_lcredit
- low_complexity
- low_disruption
Expand Down Expand Up @@ -4061,7 +4063,6 @@
- NIST-800-53-IA-5(c)
- PCI-DSS-Req-8.2.3
- PCI-DSSv4-8.3.6
- PCI-DSSv4-8.3.9
- accounts_password_pam_lcredit
- low_complexity
- low_disruption
Expand All @@ -4082,7 +4083,6 @@
- NIST-800-53-IA-5(c)
- PCI-DSS-Req-8.2.3
- PCI-DSSv4-8.3.6
- PCI-DSSv4-8.3.9
- accounts_password_pam_minlen
- low_complexity
- low_disruption
Expand Down Expand Up @@ -4123,7 +4123,6 @@
- NIST-800-53-IA-5(c)
- PCI-DSS-Req-8.2.3
- PCI-DSSv4-8.3.6
- PCI-DSSv4-8.3.9
- accounts_password_pam_minlen
- low_complexity
- low_disruption
Expand Down Expand Up @@ -4196,8 +4195,6 @@
- NIST-800-53-IA-5(4)
- NIST-800-53-IA-5(c)
- PCI-DSS-Req-8.2.3
- PCI-DSSv4-8.3.6
- PCI-DSSv4-8.3.9
- accounts_password_pam_ucredit
- low_complexity
- low_disruption
Expand Down Expand Up @@ -4236,8 +4233,6 @@
- NIST-800-53-IA-5(4)
- NIST-800-53-IA-5(c)
- PCI-DSS-Req-8.2.3
- PCI-DSSv4-8.3.6
- PCI-DSSv4-8.3.9
- accounts_password_pam_ucredit
- low_complexity
- low_disruption
Expand Down Expand Up @@ -4523,7 +4518,7 @@
- NIST-800-53-IA-5(1)(d)
- NIST-800-53-IA-5(f)
- PCI-DSS-Req-8.2.4
- PCI-DSSv4-8.3.10.1
- PCI-DSSv4-8.3.9
- accounts_maximum_age_login_defs
- low_complexity
- low_disruption
Expand Down Expand Up @@ -4563,7 +4558,7 @@
- NIST-800-53-IA-5(1)(d)
- NIST-800-53-IA-5(f)
- PCI-DSS-Req-8.2.4
- PCI-DSSv4-8.3.10.1
- PCI-DSSv4-8.3.9
- accounts_maximum_age_login_defs
- low_complexity
- low_disruption
Expand Down Expand Up @@ -5415,6 +5410,7 @@
- DISA-STIG-RHEL-08-010190
- NIST-800-53-AC-6(1)
- NIST-800-53-CM-6(a)
- PCI-DSSv4-2.2.6
- dir_perms_world_writable_sticky_bits
- low_complexity
- low_disruption
Expand Down Expand Up @@ -5444,6 +5440,7 @@
- DISA-STIG-RHEL-08-010190
- NIST-800-53-AC-6(1)
- NIST-800-53-CM-6(a)
- PCI-DSSv4-2.2.6
- dir_perms_world_writable_sticky_bits
- low_complexity
- low_disruption
Expand All @@ -5469,6 +5466,7 @@
- DISA-STIG-RHEL-08-010190
- NIST-800-53-AC-6(1)
- NIST-800-53-CM-6(a)
- PCI-DSSv4-2.2.6
- dir_perms_world_writable_sticky_bits
- low_complexity
- low_disruption
Expand Down Expand Up @@ -5504,6 +5502,7 @@
- DISA-STIG-RHEL-08-010190
- NIST-800-53-AC-6(1)
- NIST-800-53-CM-6(a)
- PCI-DSSv4-2.2.6
- dir_perms_world_writable_sticky_bits
- low_complexity
- low_disruption
Expand All @@ -5530,6 +5529,7 @@
- DISA-STIG-RHEL-08-010190
- NIST-800-53-AC-6(1)
- NIST-800-53-CM-6(a)
- PCI-DSSv4-2.2.6
- dir_perms_world_writable_sticky_bits
- low_complexity
- low_disruption
Expand All @@ -5545,6 +5545,7 @@
- DISA-STIG-RHEL-08-010190
- NIST-800-53-AC-6(1)
- NIST-800-53-CM-6(a)
- PCI-DSSv4-2.2.6
- dir_perms_world_writable_sticky_bits
- low_complexity
- low_disruption
Expand All @@ -5571,6 +5572,7 @@
- DISA-STIG-RHEL-08-010190
- NIST-800-53-AC-6(1)
- NIST-800-53-CM-6(a)
- PCI-DSSv4-2.2.6
- dir_perms_world_writable_sticky_bits
- low_complexity
- low_disruption
Expand All @@ -5596,6 +5598,7 @@
- DISA-STIG-RHEL-08-010190
- NIST-800-53-AC-6(1)
- NIST-800-53-CM-6(a)
- PCI-DSSv4-2.2.6
- dir_perms_world_writable_sticky_bits
- low_complexity
- low_disruption
Expand All @@ -5622,6 +5625,7 @@
- DISA-STIG-RHEL-08-010190
- NIST-800-53-AC-6(1)
- NIST-800-53-CM-6(a)
- PCI-DSSv4-2.2.6
- dir_perms_world_writable_sticky_bits
- low_complexity
- low_disruption
Expand Down Expand Up @@ -5770,6 +5774,7 @@
- NIST-800-53-CM-7(a)
- NIST-800-53-CM-7(b)
- NIST-800-53-IA-5(1)(c)
- PCI-DSSv4-2.2.4
- disable_strategy
- high_severity
- low_complexity
Expand Down Expand Up @@ -5813,6 +5818,7 @@
state: absent
tags:
- CCE-82180-1
- PCI-DSSv4-2.2.4
- disable_strategy
- low_complexity
- low_disruption
Expand Down Expand Up @@ -5907,6 +5913,7 @@
- NIST-800-53-CM-6(a)
- NIST-800-53-CM-7(a)
- NIST-800-53-CM-7(b)
- PCI-DSSv4-2.2.4
- disable_strategy
- high_severity
- low_complexity
Expand All @@ -5928,6 +5935,7 @@
state: absent
tags:
- CCE-83590-0
- PCI-DSSv4-2.2.4
- disable_strategy
- low_complexity
- low_disruption
Expand Down

0 comments on commit 972a190

Please sign in to comment.