fixed typo on 4.1.4.5

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
ansible-lockdown · Aug 12, 2024 · a0fd194 · a0fd194
1 parent 82c1137
commit a0fd194
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tasks/section_4/cis_4.1.4.x.yml b/tasks/section_4/cis_4.1.4.x.yml
@@ -64,7 +64,7 @@
 - name: "4.1.4.5 | PATCH | Ensure audit configuration files are 640 or more restrictive"
   ansible.builtin.file:
       path: "{{ item.path }}"
-      mode: 'u-x,g-wx,u-rwx'
+      mode: 'u-x,g-wx,o-rwx'
   failed_when: rhel9cis_4_1_4_5_file_list.state not in '[ file, absent ]'
   register: rhel9cis_4_1_4_5_file_list
   loop: "{{ auditd_conf_files.files }}"