From 9cc343ddff417c3d4c12beddfded9c16c759f7a8 Mon Sep 17 00:00:00 2001 From: Joshua Talbot Date: Tue, 29 Jan 2019 18:58:05 +0000 Subject: [PATCH] Update modprobe to 0644 Signed-off-by: Joshua Talbot --- tasks/modprobe.yml | 2 +- tests/test.yml | 4 +--- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/tasks/modprobe.yml b/tasks/modprobe.yml index 7cf998a36..bccb54b00 100644 --- a/tasks/modprobe.yml +++ b/tasks/modprobe.yml @@ -20,4 +20,4 @@ dest: '/etc/modprobe.d/dev-sec.conf' owner: 'root' group: 'root' - mode: '0640' + mode: '0644' diff --git a/tests/test.yml b/tests/test.yml index 0442586e7..1f10fa817 100644 --- a/tests/test.yml +++ b/tests/test.yml @@ -27,7 +27,7 @@ os_auth_allow_homeless: true os_security_suid_sgid_blacklist: ['/bin/umount'] os_security_suid_sgid_whitelist: ['/usr/bin/rlogin'] - os_filesystem_whitelist: ['vfat'] + os_filesystem_whitelist: [] sysctl_config: net.ipv4.ip_forward: 0 net.ipv6.conf.all.forwarding: 0 @@ -66,7 +66,6 @@ fs.suid_dumpable: 0 kernel.randomize_va_space: 2 - - name: wrapper playbook for kitchen testing "ansible-os-hardening" hosts: localhost vars: @@ -78,4 +77,3 @@ when: ansible_os_family == 'Debian' roles: - ansible-os-hardening -