ansible-lockdown / RHEL8-CIS-Audit

Audit configurations for RHEL8 CIS - utilising goss
MIT License
31 stars 24 forks source link

rhel8cis_firewall_interface should be variable #57

Open aaosopra opened 7 months ago

aaosopra commented 7 months ago

Feature Request or Enhancement:

Summary of Request Want to be able to control which network interfaces goss tests for. Only allowing enp0s3 or enp0s8 creates false negatives

Describe alternatives you've considered Disable the whole test

Suggested Code

in ansible_vars_goss.yml.j2:

rhel8cis_firewall_interface: {{ rhel8cis_firewall_interfaces }}

in defaults/main.yml

rhel8cis_firewall_interfaces: {{ ansible_default_ipv4.interface }}