added hidden file check for logfiles

Signed-off-by: Mark Bolwell <[email protected]>
ansible-lockdown · Oct 18, 2023 · ebe61e5 · ebe61e5
1 parent 6bf52a3
commit ebe61e5
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/Changelog.md b/Changelog.md
@@ -13,6 +13,7 @@ in particular @Loz and @Petri for all the testing
 - audit updates for documentation
 - 1.1.1.2 conditional logic improvement
 - 4.1.4.1 & 4.1.4.5 improved logic
+- 4.2.3 ensure checking for hidden logfiles
 
 thanks to @paulquevedojdrf
 
@@ -26,6 +27,7 @@ thanks to @zac90
 - #140
 - #141
 - #142
+- #143
 
 ### v1.0.6
 

diff --git a/tasks/section_4/cis_4.2.3.yml b/tasks/section_4/cis_4.2.3.yml
@@ -7,6 +7,7 @@
             paths: "/var/log"
             file_type: file
             recurse: true
+            hidden: true
         register: logfiles
 
       - name: "4.2.3 | PATCH | Ensure permissions on all logfiles are configured | change permissions"