tag and title fixes #258 thanks to @bgro

Signed-off-by: Mark Bolwell <[email protected]>
ansible-lockdown · Nov 29, 2024 · 7f724f6 · 7f724f6
1 parent 813df11
commit 7f724f6
Show file tree

Hide file tree

Showing 6 changed files with 8 additions and 8 deletions.
diff --git a/tasks/section_1/cis_1.1.2.2.x.yml b/tasks/section_1/cis_1.1.2.2.x.yml
@@ -45,9 +45,9 @@
     - level1-workstation
     - patch
     - mounts
-    - rule_1.1.2.2.1
     - rule_1.1.2.2.2
     - rule_1.1.2.2.3
+    - rule_1.1.2.2.4
     - NIST800-53R5_AC-3
     - NIST800-53R5_MP-2
   notify: Set_reboot_required

diff --git a/tasks/section_1/cis_1.1.2.7.x.yml b/tasks/section_1/cis_1.1.2.7.x.yml
@@ -34,9 +34,6 @@
     - ubtu22cis_rule_1_1_2_7_2 or
       ubtu22cis_rule_1_1_2_7_3 or
       ubtu22cis_rule_1_1_2_7_4
-    - NIST800-53R5_CM-7
-    - NIST800-53R5_AC-3
-    - NIST800-53R5_MP-2
   tags:
     - level1-server
     - level1-workstation
@@ -45,6 +42,9 @@
     - rule_1.1.2.7.2
     - rule_1.1.2.7.3
     - rule_1.1.2.7.4
+    - NIST800-53R5_CM-7
+    - NIST800-53R5_AC-3
+    - NIST800-53R5_MP-2
   notify: Set_reboot_required
   ansible.posix.mount:
     name: /var/log/audit

diff --git a/tasks/section_2/cis_2.1.x.yml b/tasks/section_2/cis_2.1.x.yml
@@ -4,7 +4,7 @@
   when:
     - ubtu22cis_rule_2_1_1
     - "'autofs' in ansible_facts.packages"
-    - not when system_is_ec2
+    - not system_is_ec2
   tags:
     - level1-server
     - level2-workstation

diff --git a/tasks/section_5/cis_5.3.3.3.x.yml b/tasks/section_5/cis_5.3.3.3.x.yml
@@ -62,7 +62,7 @@
     - level1-server
     - level1-workstation
     - patch
-    - rule_5.3.3.3.2
+    - rule_5.3.3.3.3
     - pam
     - NIST800-53R5_IA-5
   block:

diff --git a/tasks/section_6/cis_6.1.x.yml b/tasks/section_6/cis_6.1.x.yml
@@ -109,7 +109,7 @@
         - aidecheck.service
         - aidecheck.timer
 
-- name: "6.1.3 | Ensure cryptographic mechanisms are used to protect the integrity of audit tools"
+- name: "6.1.3 | PATCH | Ensure cryptographic mechanisms are used to protect the integrity of audit tools"
   when: ubtu22cis_rule_6_1_3
   tags:
     - level1-server

diff --git a/tasks/section_7/cis_7.2.x.yml b/tasks/section_7/cis_7.2.x.yml
@@ -94,7 +94,7 @@
     - level1-server
     - level1-workstation
     - patch
-    - rule_6.2.4
+    - rule_7.2.4
     - user
     - NIST800-53R5_IA-5
   vars: