Sebastian Gumprich
bb588bd777
* linting Signed-off-by: Sebastian Gumprich <[email protected]> * more linting Signed-off-by: Sebastian Gumprich <[email protected]> * change line length issues Signed-off-by: Sebastian Gumprich <[email protected]> * replace yes with true in tasks Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * add exception for task Signed-off-by: Sebastian Gumprich <[email protected]> * remove trailing whitespace * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back tasks Signed-off-by: Sebastian Gumprich <[email protected]>
29 lines
805 B
YAML
29 lines
805 B
YAML
---
|
|
# Granting write access to this directory for non-privileged users could provide
|
|
# them the means for gaining unauthorized elevated privileges.
|
|
# Granting read access to this directory could give an unprivileged user insight
|
|
# in how to gain elevated privileges or circumvent auditing controls.
|
|
# CIS 5.1.2 - CIS 5.1.7
|
|
#
|
|
- name: Find cron files and directories
|
|
ansible.builtin.find:
|
|
paths:
|
|
- /etc
|
|
patterns:
|
|
- cron.hourly
|
|
- cron.daily
|
|
- cron.weekly
|
|
- cron.monthly
|
|
- cron.d
|
|
- crontab
|
|
file_type: any
|
|
register: cron_directories
|
|
|
|
- name: Ensure permissions on cron files and directories are configured
|
|
ansible.builtin.file:
|
|
path: "{{ item.path }}"
|
|
owner: root
|
|
group: root
|
|
mode: og-rwx
|
|
with_items: "{{ cron_directories.files }}"
|