ComplianceAsCode / ComplianceAsCode/content
rhel8-playbook-stig.yml and rhel9-playbook-stig.yml using stale ansible_facts
- Dominant language
- Shell
- Stars
- 2.8k
- Forks
- 828
- Avg merge
- 3d 8m
- Merged PRs (30d)
- 80
Description
#### Share the context
The ansible_facts.mounts used on in the task "Ensure non-root local partitions are mounted with nodev option" is using a stale copy of ansible_facts and As this overwrites the changes made in the previous taks to add noexec and nosuid to the mount options.
#### Description of problem:
This is only impacts if both nodev and nosuid/noexec are missing. this i not an issue if any one of them is present
#### Proposed change:
A new call to builtin.setup should be made before the task "Ensure non-root local partitions are mounted with nodev option"
#### References:
1. rhel8-playbook-stig.yml
2. rhel9-playbook-stig.yml
1.
Contributor guide
Assessment
This issue has not been assessed yet.