Skip to content

Commit

Permalink
Merge pull request #53 from siemens/siemens/feat/remove_6.1.12_duplicate
Browse files Browse the repository at this point in the history
Fixing issue #52
  • Loading branch information
uk-bolly authored Feb 22, 2024
2 parents 27f69f8 + a480622 commit fb93017
Showing 1 changed file with 6 additions and 15 deletions.
21 changes: 6 additions & 15 deletions tasks/section_6/cis_6.1.x.yml
Original file line number Diff line number Diff line change
Expand Up @@ -191,13 +191,19 @@
when:
- amzn2023cis_6_1_10_perms_results.stdout_lines is defined
- amzn2023cis_no_world_write_adjust

- name: "6.1.10 | PATCH | Ensure sticky bit is set on all world-writable directories"
ansible.builtin.shell: df --local -P | awk {'if (NR!=1) print $6'} | xargs -I '{}' find '{}' -xdev -type d -perm -0002 2>/dev/null | xargs chmod a+t
changed_when: false
failed_when: false
when:
- amzn2023cis_rule_6_1_10
tags:
- level1-server
- patch
- files
- permissions
- stickybits
- rule_6.1.10
- nist_sp800-53r5_AC-3
- nist_sp800-53r5_MP-2
Expand Down Expand Up @@ -278,21 +284,6 @@
- nist_sp800-53r5_AC-3
- nist_sp800-53r5_MP-2

- name: "6.1.12 | PATCH | Ensure sticky bit is set on all world-writable directories"
ansible.builtin.shell: df --local -P | awk {'if (NR!=1) print $6'} | xargs -I '{}' find '{}' -xdev -type d -perm -0002 2>/dev/null | xargs chmod a+t
changed_when: false
failed_when: false
when:
- amzn2023cis_rule_6_1_12
tags:
- level1-server
- patch
- stickybits
- permissons
- rule_6.1.12
- nist_sp800-53r5_AC-3
- nist_sp800-53r5_MP-2

- name: "6.1.12 | AUDIT | Ensure SUID and SGID files are reviewed"
block:
- name: "6.1.12 | AUDIT | Ensure SUID and SGID files are reviewed | Find all SUID executables"
Expand Down

0 comments on commit fb93017

Please sign in to comment.