diff --git a/tasks/Cat2/RHEL-09-21xxxx.yml b/tasks/Cat2/RHEL-09-21xxxx.yml index cd569fe..7904b77 100644 --- a/tasks/Cat2/RHEL-09-21xxxx.yml +++ b/tasks/Cat2/RHEL-09-21xxxx.yml @@ -808,6 +808,7 @@ - name: "MEDIUM | RHEL-09-213115 | PATCH | The kdump service on RHEL 9 must be disabled." when: - rhel_09_213115 + - "'kdump' is in ansible_facts.packages" tags: - RHEL-09-213115 - CAT2 diff --git a/tasks/Cat2/RHEL-09-25xxxx.yml b/tasks/Cat2/RHEL-09-25xxxx.yml index 291db5b..ef7c1da 100644 --- a/tasks/Cat2/RHEL-09-25xxxx.yml +++ b/tasks/Cat2/RHEL-09-25xxxx.yml @@ -195,16 +195,18 @@ - name: "MEDIUM | RHEL-09-251040 | PATCH | RHEL 9 network interfaces must not be in promiscuous mode." when: - not rhel9stig_disruption_high - - item not in rhel9stig_promisc_if + - item in rhel9stig_promisc_if ansible.builtin.debug: msg: "Warning!! You have interfaces set to promicious mode no in the exception list" + loop: "{{ ansible_facts.interfaces }}" - name: "MEDIUM | RHEL-09-251040 | PATCH | RHEL 9 network interfaces must not be in promiscuous mode." when: - not rhel9stig_disruption_high - - item not in rhel9stig_promisc_if - ansible.builtin.import_tasks: + - item in rhel9stig_promisc_if + ansible.builtin.include_tasks: file: warning_facts.yml + loop: "{{ ansible_facts.interfaces }}" - name: "MEDIUM | RHEL-09-251045 | PATCH | RHEL 9 must enable hardening for the Berkeley Packet Filter just-in-time compiler." when: