linting (#603)

* linting Signed-off-by: Sebastian Gumprich <[email protected]> * more linting Signed-off-by: Sebastian Gumprich <[email protected]> * change line length issues Signed-off-by: Sebastian Gumprich <[email protected]> * replace yes with true in tasks Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * add exception for task Signed-off-by: Sebastian Gumprich <[email protected]> * remove trailing whitespace * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back tasks Signed-off-by: Sebastian Gumprich <[email protected]>
2023-01-24 12:40:27 +01:00
1 parent a94168c84f
commit bb588bd777
@@ -2,63 +2,63 @@
 - name: Disable coredumps
  when: not os_security_kernel_enable_core_dump | bool
  block:
-  - name: Create limits.d-directory if it does not exist | sysctl-31a, sysctl-31b
-    file:
-      path: '/etc/security/limits.d'
-      owner: 'root'
-      group: 'root'
-      mode: '0755'
-      state: 'directory'
+    - name: Create limits.d-directory if it does not exist | sysctl-31a, sysctl-31b
+      ansible.builtin.file:
+        path: /etc/security/limits.d
+        owner: root
+        group: root
+        mode: "0755"
+        state: directory

-  - name: Create additional limits config file -> 10.hardcore.conf | sysctl-31a, sysctl-31b
-    pam_limits:
-      dest: '/etc/security/limits.d/10.hardcore.conf'
-      domain: '*'
-      limit_type: hard
-      limit_item: core
-      value: '0'
-      comment: Prevent core dumps for all users. These are usually not needed and may contain sensitive information
+    - name: Create additional limits config file -> 10.hardcore.conf | sysctl-31a, sysctl-31b
+      community.general.pam_limits:
+        dest: /etc/security/limits.d/10.hardcore.conf
+        domain: "*"
+        limit_type: hard
+        limit_item: core
+        value: "0"
+        comment: Prevent core dumps for all users. These are usually not needed and may contain sensitive information

-  - name: Set 10.hardcore.conf perms to 0400 and root ownership
-    file:
-      path: /etc/security/limits.d/10.hardcore.conf
-      owner: 'root'
-      group: 'root'
-      mode: '0440'
-      state: touch
-      modification_time: preserve
-      access_time: preserve
+    - name: Set 10.hardcore.conf perms to 0400 and root ownership
+      ansible.builtin.file:
+        path: /etc/security/limits.d/10.hardcore.conf
+        owner: root
+        group: root
+        mode: "0440"
+        state: touch
+        modification_time: preserve
+        access_time: preserve

-  - name: Create coredump.conf.d-directory if it does not exist
-    file:
-      path: '/etc/systemd/coredump.conf.d'
-      owner: root
-      group: root
-      mode: 0755
-      state: directory
-    when: ansible_service_mgr == "systemd"
+    - name: Create coredump.conf.d-directory if it does not exist
+      ansible.builtin.file:
+        path: /etc/systemd/coredump.conf.d
+        owner: root
+        group: root
+        mode: 0755
+        state: directory
+      when: ansible_service_mgr == "systemd"

-  - name: Create custom.conf for disabling coredumps
-    template:
-      src: 'etc/systemd/coredump.conf.d/coredumps.conf.j2'
-      dest: '/etc/systemd/coredump.conf.d/custom.conf'
-      owner: root
-      group: root
-      mode: 0644
-    when: ansible_service_mgr == "systemd"
-    notify: Reload systemd
+    - name: Create custom.conf for disabling coredumps
+      ansible.builtin.template:
+        src: etc/systemd/coredump.conf.d/coredumps.conf.j2
+        dest: /etc/systemd/coredump.conf.d/custom.conf
+        owner: root
+        group: root
+        mode: 0644
+      when: ansible_service_mgr == "systemd"
+      notify: Reload systemd

 - name: Enable coredumps
  when: os_security_kernel_enable_core_dump | bool
  block:
    - name: Remove coredump.conf.d directory with files
-      file:
+      ansible.builtin.file:
        path: /etc/systemd/coredump.conf.d
        state: absent
      when: ansible_service_mgr == "systemd"
      notify: Reload systemd

    - name: Remove 10.hardcore.conf config file
-      file:
+      ansible.builtin.file:
        path: /etc/security/limits.d/10.hardcore.conf
        state: absent