Merge pull request #305 from ansible-lockdown/sudo_passwd

Sudo passwd
ansible-lockdown · Jul 26, 2023 · a6f37cc · a6f37cc
2 parents 421b5e7 + 806974d
commit a6f37cc
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/Changelog.md b/Changelog.md
@@ -1,5 +1,10 @@
 # Changes to rhel8CIS
 
+## 1.5.12
+
+- [#304](https://github.com/ansible-lockdown/RHEL8-CIS/issues/304)
+  - improve passwd check for user only is using sudo thanks to manish on discord community for highlighting issue.
+
 ## 1.5.11
 
 thanks to @bbaassssiiee

diff --git a/tasks/main.yml b/tasks/main.yml
@@ -87,6 +87,7 @@
             sudo_password_rule: rhel8cis_rule_5_3_4
   when:
       - rhel8cis_rule_5_3_4
+      - ansible_env.SUDO_USER is defined
       - not system_is_ec2
   tags:
       - user_passwd