4Upstream: Adjusting strings used for user-shells conditionals

Signed-off-by: Pruteanu <ionut.pruteanu@siemens.com> Signed-off-by: z0042h2w <ionut.pruteanu@siemens.com>
ansible-lockdown · Mar 26, 2024 · 1bf4058 · 1bf4058
1 parent a233ccc
commit 1bf4058
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/tasks/section_5/cis_5.6.x.yml b/tasks/section_5/cis_5.6.x.yml
@@ -14,8 +14,9 @@
             - item.id != "halt"
             - item.id != "nfsnobody"
             - item.uid < min_int_uid | int
-            - item.shell != "      /bin/false"
-            - item.shell != "      /usr/sbin/nologin"
+            - item.shell != "/bin/false"
+            - item.shell != "/usr/sbin/nologin"
+            - item.shell != "/sbin/nologin"
         loop_control:
             label: "{{ item.id }}"
 
@@ -31,8 +32,9 @@
             - item.id != "root"
             - item.id != "nfsnobody"
             - item.uid < min_int_uid | int
-            - item.shell != "      /bin/false"
-            - item.shell != "      /usr/sbin/nologin"
+            - item.shell != "/bin/false"
+            - item.shell != "/usr/sbin/nologin"
+            - item.shell != "/sbin/nologin"
         loop_control:
             label: "{{ item.id }}"
   when: