ComplianceAsCode / ComplianceAsCode/content

rhel8-playbook-stig.yml and rhel9-playbook-stig.yml using stale ansible_facts

Open
#11,865 0 comments 0 reactions 0 assignees View on GitHub
enhancement triaged
Dominant language
Shell
Stars
2.8k
Forks
828
Avg merge
3d 8m
Merged PRs (30d)
80

Description

#### Share the context

The ansible_facts.mounts used on in the task "Ensure non-root local partitions are mounted with nodev option" is using a stale copy of ansible_facts and As this overwrites the changes made in the previous taks to add noexec and nosuid to the mount options.

#### Description of problem:

This is only impacts if both nodev and nosuid/noexec are missing. this i not an issue if any one of them is present

#### Proposed change:

A new call to builtin.setup should be made before the task "Ensure non-root local partitions are mounted with nodev option"

#### References:

1. rhel8-playbook-stig.yml
2. rhel9-playbook-stig.yml
1.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.