Skip to content

Duplicate vars and tasks in rhel8-playbook-stig.yml #89

@davewujcik

Description

@davewujcik

The vars section of this generated playbook is scattered with duplicate variables and values, some are duplicated 4x.

Examples:

      var_system_crypto_policy: !!str FIPS
      var_system_crypto_policy: !!str FIPS
      sshd_approved_ciphers: !!str aes256-ctr,aes192-ctr,aes128-ctr
      sshd_approved_ciphers: !!str aes256-ctr,aes192-ctr,aes128-ctr
      sshd_approved_macs: !!str hmac-sha2-512,hmac-sha2-256
      sshd_approved_macs: !!str hmac-sha2-512,hmac-sha2-256
      var_accounts_user_umask: !!str 077
      var_accounts_user_umask: !!str 077
      var_accounts_user_umask: !!str 077
      var_accounts_user_umask: !!str 077
   tasks:
    - name: Ensure aide is installed
      package:
        name: aide
        state: present
      when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
      tags:
        - CCE-80844-4
        - CJIS-5.10.1.3
        - DISA-STIG-RHEL-08-010359
        - NIST-800-53-CM-6(a)
        - PCI-DSS-Req-11.5
        - enable_strategy
        - low_complexity
        - low_disruption
        - medium_severity
        - no_reboot_needed
        - package_aide_installed

    - name: Ensure aide is installed
      package:
        name: '{{ item }}'
        state: present
      with_items:
        - aide
      when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
      tags:
        - CCE-85964-5
        - DISA-STIG-RHEL-08-030650
        - NIST-800-53-AU-9(3)
        - NIST-800-53-AU-9(3).1
        - aide_check_audit_tools
        - low_complexity
        - low_disruption
        - medium_severity
        - no_reboot_needed
        - restrict_strategy

This makes customization difficult as the end user must clean all of this up before running the playbook.

Thanks,

-- Dave

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions