-
Notifications
You must be signed in to change notification settings - Fork 32
Open
Description
The vars section of this generated playbook is scattered with duplicate variables and values, some are duplicated 4x.
Examples:
var_system_crypto_policy: !!str FIPS
var_system_crypto_policy: !!str FIPS
sshd_approved_ciphers: !!str aes256-ctr,aes192-ctr,aes128-ctr
sshd_approved_ciphers: !!str aes256-ctr,aes192-ctr,aes128-ctr
sshd_approved_macs: !!str hmac-sha2-512,hmac-sha2-256
sshd_approved_macs: !!str hmac-sha2-512,hmac-sha2-256
var_accounts_user_umask: !!str 077
var_accounts_user_umask: !!str 077
var_accounts_user_umask: !!str 077
var_accounts_user_umask: !!str 077
tasks:
- name: Ensure aide is installed
package:
name: aide
state: present
when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
tags:
- CCE-80844-4
- CJIS-5.10.1.3
- DISA-STIG-RHEL-08-010359
- NIST-800-53-CM-6(a)
- PCI-DSS-Req-11.5
- enable_strategy
- low_complexity
- low_disruption
- medium_severity
- no_reboot_needed
- package_aide_installed
- name: Ensure aide is installed
package:
name: '{{ item }}'
state: present
with_items:
- aide
when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
tags:
- CCE-85964-5
- DISA-STIG-RHEL-08-030650
- NIST-800-53-AU-9(3)
- NIST-800-53-AU-9(3).1
- aide_check_audit_tools
- low_complexity
- low_disruption
- medium_severity
- no_reboot_needed
- restrict_strategy
This makes customization difficult as the end user must clean all of this up before running the playbook.
Thanks,
-- Dave
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels