cis-ubuntu-ansible
cis-ubuntu-ansible copied to clipboard
4.5.10 uses incorrect check
The check for appamor status uses:
when: apparmor_status.failed is defined
But the result object looks like
TASK [cis : debug] ***************************************************************************************************************************************************************************************************************************************
ok: [10.0.17.220] => {
"apparmor_status": {
"changed": false,
"failed": false,
"name": "apparmor",
"state": "started"
}
}
The check should be
when: apparmor_status.failed is defined and apparmor_status.failed == true
Isn't when: apparmor_status.failed enough?
Do you want to submit a pull request?