From ad9ccd8ecb65b6cb77b4cd3346bfd7d9b3bf5129 Mon Sep 17 00:00:00 2001 From: Sebastian Gumprich Date: Mon, 28 Nov 2022 17:17:25 +0100 Subject: [PATCH] use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich --- roles/ssh_hardening/tasks/hardening.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/roles/ssh_hardening/tasks/hardening.yml b/roles/ssh_hardening/tasks/hardening.yml index 5099760bd..4fa4d6afc 100644 --- a/roles/ssh_hardening/tasks/hardening.yml +++ b/roles/ssh_hardening/tasks/hardening.yml @@ -101,8 +101,9 @@ when: ssh_server_hardening | bool - name: Remove all small primes - ansible.builtin.shell: awk '$5 >= {{ sshd_moduli_minimum }}' {{ sshd_moduli_file }} > {{ sshd_moduli_file }}.new ; [ -r {{ sshd_moduli_file }}.new -a -s {{ sshd_moduli_file - }}.new ] && mv {{ sshd_moduli_file }}.new {{ sshd_moduli_file }} || true + ansible.builtin.shell: > + awk '$5 >= {{ sshd_moduli_minimum }}' {{ sshd_moduli_file }} > {{ sshd_moduli_file }}.new ; [ -r {{ sshd_moduli_file }}.new + -a -s {{ sshd_moduli_file }}.new ] && mv {{ sshd_moduli_file }}.new {{ sshd_moduli_file }} || true notify: Restart sshd when: - ssh_server_hardening | bool