Mirrors/ansible-collection-hardening
2
0
Fork 0
mirror of https://github.com/dev-sec/ansible-collection-hardening synced 2024-11-10 09:14:18 +00:00
Code Issues Projects Releases Packages Wiki Activity

replace ignore_errors to failed_when to supress ugly error warnings for 'remove suid/sgid' task

Browse source
This commit is contained in:
fitz123 2016-05-19 23:56:14 +07:00
parent 87778593d0
commit 8ebc97c130
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
tasks/suid_sgid.yml
View file

@ -1,7 +1,7 @@
---
- name: remove suid/sgid bit from binaries in blacklist
file: path='{{item}}' mode='a-s' state=file follow=yes
ignore_errors: true
failed_when: false
with_items:
- '{{ os_security_suid_sgid_system_blacklist }}'
- '{{ os_security_suid_sgid_blacklist }}'