ansible-lockdown / RHEL7-CIS

Ansible role for Red Hat 7 CIS Baseline
https://ansible-lockdown.readthedocs.io/en/latest/
MIT License
473 stars 303 forks source link

cis_5.2.x.yml - 5.2.15 - Fatal error. #205

Closed bryansullins closed 3 years ago

bryansullins commented 3 years ago

TASK [RHEL7-CIS : SCORED | 5.2.15 | PATCH | Ensure only strong Key Exchange algorithms are used] *** fatal: [default]: FAILED! => {"msg": "The task includes an option with an undefined variable. The error was: 'dict object' has no attribute 'kex'\n\nThe error appears to be in 'ansible/roles/RHEL7-CIS/tasks/section_5/cis_5.2.x.yml': line 272, column 3, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n\n- name: \"SCORED | 5.2.15 | PATCH | Ensure only strong Key Exchange algorithms are used\"\n ^ here\n"}

uk-bolly commented 3 years ago

Hi @bryansullins

If you could check you are using the last version from https://github.com/ansible-lockdown/RHEL7-CIS The default variables has the kex variable (ssh key exchange) set and i am unable to reproduce your issue.

If you are coming from a previous version, there has been many changes not only CIS requirements but also in the way the playbook runs.

Any information you are able to provide with regard your setup, if the above does not resolve your issue.

uk-bolly

uk-bolly commented 3 years ago

Hi @bryansullins

Have you managed to confirm if the issue still exists for you?

uk-bolly

bryansullins commented 3 years ago

Thank you so much - I did not. I had an internal release that had to happen.

I worked around it by hard-coding the change in one of our other workflow playbooks.

We will try again next quarter. You can close this for now if you like.