added condiation for acl pkg

Signed-off-by: Mark Bolwell <[email protected]>
ansible-lockdown · Aug 20, 2024 · c59e598 · c59e598
1 parent fa145a9
commit c59e598
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/tasks/section_7/cis_7.2.x.yml b/tasks/section_7/cis_7.2.x.yml
@@ -278,7 +278,9 @@
 
     # set default ACLs so the homedir has an effective umask of 0027
     - name: "7.2.9 | PATCH | Ensure local interactive user home directories are configured | Set group ACL"
-      when: not system_is_container
+      when:
+        - not system_is_container
+        - "'acl' in ansible_facts.packages"
       ansible.posix.acl:
         path: "{{ item }}"
         default: true