ansible-lockdown / RHEL9-CIS

Ansible role for Red Hat 9 CIS Baseline
https://ansible-lockdown.readthedocs.io
MIT License
123 stars 93 forks source link

many 5.2.X sections edit the sshd config file but do not call the restart handler for sshd #230

Closed numericillustration closed 2 months ago

numericillustration commented 2 months ago

Describe the Issue Multiple items in section 5.2 are missing a notify to the sshd restart handler

Expected Behavior Making changes to sshd's config file should restart sshd to make those changes active

Actual Behavior changes are made to sshd'c config with no restart of sshd

Control(s) Affected 5.2.5 5.2.6 5.2.7 5.2.8 5.2.9 5.2.10 5.2.11 5.2.12 5.2.13

5.2.15 5.2.16 5.2.17 5.2.18 5.2.19 5.2.20

Environment (please complete the following information):

Additional Notes I will PR in a fix for this sometime tonight

Possible Solution add a notify to the existing sshd restart handler already used in other 5.2 sections,

jLemmings commented 2 months ago

Could we please have a release with this PR? Just wanted to do the same changes but @numericillustration has already done them.