Mirrors/ansible-collection-hardening
2
0
Fork 0
mirror of https://github.com/dev-sec/ansible-collection-hardening synced 2024-11-10 01:04:13 +00:00
Code Issues Projects Releases Packages Wiki Activity

one last time ...

Browse source 
Signed-off-by: Martin Schurz <Martin.Schurz@telekom.de>
This commit is contained in:
Martin Schurz 2023-11-11 04:27:59 +01:00
parent fb22b242fe
commit bf177add07
2 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
molecule/mysql_hardening/verify_tasks/mysql_users.yml
View file

@ -44,6 +44,7 @@
community.mysql.mysql_query:
query:
- "DROP ROLE 'role_keep';"
- "DROP ROLE IF EXISTS 'PUBLIC';" # OpenSuse default role interferes with inspec tests
login_unix_socket: "{{ login_unix_socket | default(omit) }}"
when:
- mysql_role_support.rowcount[0] > 0

2
roles/mysql_hardening/tasks/mysql_secure_installation.yml
View file

@ -66,7 +66,7 @@
AND USER NOT IN ('mysql.sys',
'mysqlxsys',
'mariadb.sys')
{{ 'AND convert(is_role USING utf8) = "N"' if mysql_role_support.rowcount[0] > 0 }};
{{ 'AND CONVERT(is_role USING utf8) = "N"' if mysql_role_support.rowcount[0] > 0 }};
login_unix_socket: "{{ login_unix_socket | default(omit) }}"
register: mysql_users_wo_passwords_or_auth_string
check_mode: false