ansible-lockdown / AMAZON2023-CIS

Ansible role for Amazon2023 CIS Baseline
https://ansible-lockdown.readthedocs.io/en/latest/
MIT License
24 stars 18 forks source link

Duplicated 6.1.12 task #52

Closed DianaMariaDDM closed 5 months ago

DianaMariaDDM commented 6 months ago

Describe the Issue Control 6.1.12 has two different tasks one of which has nothing to do with Ensure SUID and SGID files are reviewed.

Expected Behavior There should only be one task that implements the 6.1.12 control.

Actual Behavior There is indeed only one task that does this, only that there is another task with the same number 6.1.12 that does something needed to be done for control 6.1.10. 6.1.12 | PATCH | Ensure sticky bit is set on all world-writable directories, the sticky bit needs to be set in control 6.1.10 not control 6.1.12!

Control(s) Affected Control 6.1.10 Control 6.1.12

Environment (please complete the following information):

Additional Notes Anything additional goes here

Possible Solution The solution will be provided in a PR.