Skip to content

Commit 08ebd3d

Browse files
authored
Merge pull request #220 from dev-sec/fix_219
add docs to find-task in minimize access. fix #219
2 parents a692a84 + 05415d9 commit 08ebd3d

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

tasks/minimize_access.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,9 @@
11
---
2+
# If the find-task throws an error on /usr/bin/X11 like "File system loop detected"
3+
# the other files inside /usr/bin (and all other directories) are
4+
# still getting found and the permissions minimized in the next task.
5+
# This is also the reason why there's ignore_errors: true on the task.
6+
# also see: https://github.com/dev-sec/ansible-os-hardening/issues/219
27
- name: find files with write-permissions for group
38
shell: "find -L {{ item }} -perm /go+w -type f" # noqa 305
49
with_flattened:

0 commit comments

Comments
 (0)