ansible lint fixes

2024-11-25 06:31:27 +00:00 · 2020-12-11 16:54:32 -07:00 · 2020-12-11 16:54:32 -07:00 · 42abf5df58
commit 42abf5df58
parent 3b05337466
1 changed files with 6 additions and 0 deletions
--- a/ansible/playbooks/tasks/harden.yml
+++ b/ansible/playbooks/tasks/harden.yml
@ -175,6 +175,7 @@
        dest: "/etc/audit/rules.d/collection.rules"
        owner: root
        group: root
+        mode: '600'
        backup: true
      notify:
        - regenerate_auditd_rules
@ -222,6 +223,11 @@
    state: present
    regexp: ^umask
    line: "umask 027"
+    create: yes
+    owner: root
+    group: root
+    mode: '0644'
+  when: ansible_distribution_major_version == '7'
  tags:
    - harden