Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rhel8-playbook-stig.yml and rhel9-playbook-stig.yml using stale ansible_facts #11865

Open
msakhwand opened this issue Apr 22, 2024 · 0 comments
Labels
enhancement General enhancements to the project.

Comments

@msakhwand
Copy link

Share the context

The ansible_facts.mounts used on in the task "Ensure non-root local partitions are mounted with nodev option" is using a stale copy of ansible_facts and As this overwrites the changes made in the previous taks to add noexec and nosuid to the mount options.

Description of problem:

This is only impacts if both nodev and nosuid/noexec are missing. this i not an issue if any one of them is present

Proposed change:

A new call to builtin.setup should be made before the task "Ensure non-root local partitions are mounted with nodev option"

References:

  1. rhel8-playbook-stig.yml
  2. rhel9-playbook-stig.yml
@msakhwand msakhwand added the enhancement General enhancements to the project. label Apr 22, 2024
@msakhwand msakhwand changed the title rhel8-playbook-stig.yml and rhel9-playbook-stig.yml rhel8-playbook-stig.yml and rhel9-playbook-stig.yml using stale ansible_facts Apr 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement General enhancements to the project.
Projects
None yet
Development

No branches or pull requests

1 participant