mirror of
https://github.com/dev-sec/ansible-collection-hardening
synced 2024-11-10 09:14:18 +00:00
fix bug in check for /boot
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
This commit is contained in:
parent
b6b2d45f09
commit
fa7f8597d9
2 changed files with 3 additions and 2 deletions
|
@ -16,6 +16,7 @@
|
|||
os_auth_lockout_time: 15
|
||||
os_yum_repo_file_whitelist: ['foo.repo']
|
||||
os_mnt_boot_enabled: true
|
||||
os_mnt_boot_src: "/dev/vda1"
|
||||
|
||||
# - name: wrapper playbook for kitchen testing "ansible-os-hardening"
|
||||
# hosts: all
|
||||
|
|
|
@ -96,7 +96,7 @@
|
|||
register: bootmount
|
||||
when:
|
||||
- os_mnt_boot_enabled | bool
|
||||
- boot_exists | bool
|
||||
- boot_exists.stat.exists | bool
|
||||
|
||||
- name: Harden permissions for /boot directory
|
||||
file:
|
||||
|
@ -104,7 +104,7 @@
|
|||
owner: 'root'
|
||||
group: 'root'
|
||||
mode: '{{ os_mnt_boot_dir_mode }}'
|
||||
when: boot_exists | bool
|
||||
when: boot_exists.stat.exists | bool
|
||||
|
||||
- name: Mount /dev with hardened options
|
||||
mount:
|
||||
|
|
Loading…
Reference in a new issue