Issue 164 165 fixes (#168)

* Add issue #164 fix Signed-off-by: George Nalen <[email protected]> * issue #165 fix Signed-off-by: George Nalen <[email protected]> * updated git install os compare Signed-off-by: George Nalen <[email protected]> * removed rhel7 git install Signed-off-by: George Nalen <[email protected]> * Adjusted pull_request_target to pull_request Signed-off-by: George Nalen <[email protected]> * put rhel7 git install ref back with corrected version ref, added pull_request_target ref in to use branch from pr, and added 1.4.2 to skip for testing Signed-off-by: George Nalen <[email protected]> * updated readme for discord and pipeline testing area Signed-off-by: George Nalen <[email protected]> * Updated tasks/main.yml tags and other spacing Signed-off-by: George Nalen <[email protected]> * added final missing run_audit Signed-off-by: George Nalen <[email protected]>
ansible-lockdown · Apr 11, 2022 · 43399a3 · 43399a3
1 parent e8058e7
commit 43399a3
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/tasks/section_5/cis_5.5.x.yml b/tasks/section_5/cis_5.5.x.yml
@@ -5,11 +5,11 @@
       - name: "5.5.1 | PATCH | Ensure password creation requirements are configured | Set pwquality config settings"
         lineinfile:
             path: /etc/security/pwquality.conf
-            regexp: ^{{ item.name }}
-            line: “{{ item.name }} = {{ item.value }}”
+            regexp: "{{ item.regexp }}"
+            line: "{{ item.line }}"
         with_items:
-            - { name: minlen, value: “{{ rhel8cis_pam_password.minlen }}” }
-            - { name: minclass, value: “{{ rhel8cis_pam_password.minclass }}” }
+            - { regexp: '^minlen', line: 'minlen = {{ rhel8cis_pam_password.minlen }}' }
+            - { regexp: '^minclass', line: 'minclass = {{ rhel8cis_pam_password.minclass }}' }
 
       - name: "5.5.1 | PATCH | Ensure password creation requirements are configured | Set system-auth and password-auth retry settings"
         lineinfile: