search

dsglaser / cis-security

Playbooks to implement Center for Internet Security (CIS) controls for RHEL (7-9), RHEL Clones, Ubuntu (18.04-22.04), and Microsoft Windows (10, Server 2019)
Other
90 stars 63 forks source link

2.2.1.3 on Centos 8 #27

Closed metabsd closed 3 years ago

metabsd commented 3 years ago

That normal ?

TASK [dsglaser.cis_security.cis_security : 2.2.1.3 - configure sysconfig time_server options] ***
changed: [templates8.domain] => {"changed": true, "checksum": "c81fc383a075ffadae9801d9c7ee7528c271abaf", "dest": "/etc/sysconfig/chronyd", "gid": 0, "group": "root", "md5sum": "b9583a310fb2cd295b8e054abbc5c1fc", "mode": "0644", "owner": "root", "size": 19, "src": "/root/.ansible/tmp/ansible-tmp-1607016045.3845468-10993-207435942943047/source", "state": "file", "uid": 0}

I don't understand why I see this point is normally only for RHEL7 not 8

Thx!

dsglaser commented 3 years ago

Benoit,

I think your question is why is this control not running on RHEL8/CentOS8 machines but does run on RHEL7/CentOS7? It really should be running on both, however I did just noticed a conditional in it that shouldn't need to be checked. That may be stopping it from running if the time_service variable is not set.

I've updated it in the code and it should be released in the next version that gets released.

Thanks for all the comments and MRs!

Dave

DAVID GLASER

On Fri, Dec 4, 2020 at 1:36 PM Benoit Martin notifications@github.com wrote:

That normal ?

TASK [dsglaser.cis_security.cis_security : 2.2.1.3 - configure sysconfig time_server options] *** changed: [templates8.domain] => {"changed": true, "checksum": "c81fc383a075ffadae9801d9c7ee7528c271abaf", "dest": "/etc/sysconfig/chronyd", "gid": 0, "group": "root", "md5sum": "b9583a310fb2cd295b8e054abbc5c1fc", "mode": "0644", "owner": "root", "size": 19, "src": "/root/.ansible/tmp/ansible-tmp-1607016045.3845468-10993-207435942943047/source", "state": "file", "uid": 0}

I don't understand why I see this point is normally only for RHEL7 not 8

Thx!

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/dsglaser/cis-security/issues/27, or unsubscribe https://github.com/notifications/unsubscribe-auth/AELV4GE6AOO4AFE2PSB345LSTETZTANCNFSM4UNZWFBA .