content icon indicating copy to clipboard operation
content copied to clipboard

rhel8-playbook-stig.yml and rhel9-playbook-stig.yml using stale ansible_facts

Open msakhwand opened this issue 1 year ago • 0 comments

Share the context

The ansible_facts.mounts used on in the task "Ensure non-root local partitions are mounted with nodev option" is using a stale copy of ansible_facts and As this overwrites the changes made in the previous taks to add noexec and nosuid to the mount options.

Description of problem:

This is only impacts if both nodev and nosuid/noexec are missing. this i not an issue if any one of them is present

Proposed change:

A new call to builtin.setup should be made before the task "Ensure non-root local partitions are mounted with nodev option"

References:

  1. rhel8-playbook-stig.yml
  2. rhel9-playbook-stig.yml

msakhwand avatar Apr 22 '24 17:04 msakhwand