Skip to content

Commit 21e4b5d

Browse files
committed
Applying updates to adhere to project code quality standards
Signed-off-by: Chad Cravens <chad.cravens@ossys.com>
1 parent 1459fc2 commit 21e4b5d

2 files changed

Lines changed: 4 additions & 4 deletions

File tree

handlers/main.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@
4848

4949
- name: generate fapolicyd rules
5050
command: fagenrules --load
51-
when: rules_dir.stat.exists
51+
when: rhel_08_040137_rules_dir.stat.exists
5252

5353
- name: restart fapolicyd
5454
service:

tasks/fix-cat2.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6284,13 +6284,13 @@
62846284
- name: "MEDIUM | RHEL-08-040137 | PATCH | The RHEL 8 fapolicy module must be configured to employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs. | Check for rules.d/ directory"
62856285
stat:
62866286
path: /etc/fapolicyd/rules.d/
6287-
register: rules_dir
6287+
register: rhel_08_040137_rules_dir
62886288

62896289
- name: "MEDIUM | RHEL-08-040137 | PATCH | The RHEL 8 fapolicy module must be configured to employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs. | Set fapolicy whitelist "
62906290
lineinfile:
6291-
create: yes
6292-
path: "{{ '/etc/fapolicyd/rules.d/99-stig.rules' if rules_dir.stat.exists else '/etc/fapolicyd/fapolicyd.rules' }}"
6291+
path: "{{ '/etc/fapolicyd/rules.d/99-stig.rules' if rhel_08_040137_rules_dir.stat.exists else '/etc/fapolicyd/fapolicyd.rules' }}"
62936292
line: "{{ item }}"
6293+
create: yes
62946294
with_items:
62956295
- "allow exe={{ ansible_python.executable }} : ftype=text/x-python"
62966296
- "{{ rhel8stig_fapolicy_white_list }}"

0 commit comments

Comments
 (0)