From bbcc09c2451509beec8e4397b3b99b129fca0616 Mon Sep 17 00:00:00 2001 From: Mark Bolwell Date: Wed, 30 Aug 2023 16:21:21 +0100 Subject: [PATCH 1/2] Added conditional for UEFI check and updated changelog Signed-off-by: Mark Bolwell --- Changelog.md | 7 ++++++- tasks/prelim.yml | 2 ++ 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/Changelog.md b/Changelog.md index 314395c..75da505 100644 --- a/Changelog.md +++ b/Changelog.md @@ -1,3 +1,8 @@ # Amazon 2023 CIS - 26th June 2023 -## Initial release +## 0.91 + +- issue #2 thanks to @babinskiy +- moved to self hosted action after forking from arillso + +## Initial release 0.9 diff --git a/tasks/prelim.yml b/tasks/prelim.yml index 2878718..f9e90ed 100644 --- a/tasks/prelim.yml +++ b/tasks/prelim.yml @@ -120,6 +120,8 @@ ansible.builtin.set_fact: grub2_path: /etc/grub2-efi.cfg when: amzn2023cis_efi_boot.stat.exists + when: + - amzn2023cis_rule_1_4_1 tags: - always From 3b480770451d832a71482903ae26497ce854f1cc Mon Sep 17 00:00:00 2001 From: Mark Bolwell Date: Wed, 30 Aug 2023 16:40:46 +0100 Subject: [PATCH 2/2] added temp skip for audit Signed-off-by: Mark Bolwell --- tasks/prelim.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/tasks/prelim.yml b/tasks/prelim.yml index f9e90ed..504bf4b 100644 --- a/tasks/prelim.yml +++ b/tasks/prelim.yml @@ -264,3 +264,8 @@ manager: auto tags: - always + +- name: "PRELIM | Set audit to not run if amazon 2023" + ansible.builtin.set_fact: + run_audit: false + when: ansible_distribution_major_version == '2023'