ansible-lockdown · uk-bolly · Apr 27, 2022 · Apr 26, 2022
diff --git a/tasks/main.yml b/tasks/main.yml
@@ -55,7 +55,7 @@
   when:
       - rhel9cis_set_boot_pass
       - rhel9cis_rule_1_4_1
-  tags: 
+  tags:
       - always
 
 - name: "check sugroup exists if used"

diff --git a/tasks/section_3/cis_3.4.1.x.yml b/tasks/section_3/cis_3.4.1.x.yml
@@ -31,7 +31,7 @@
         package:
             name: iptables-services
             state: absent
-        when: 
+        when:
   when:
       - rhel9cis_rule_3_4_1_2
       - "'iptables-services' in ansible_facts.packages"

diff --git a/tasks/section_3/main.yml b/tasks/section_3/main.yml
@@ -18,4 +18,3 @@
   include_tasks: cis_3.4.2.x.yml
   when:
   - rhel9cis_firewall == "nftables"
-
diff --git a/tasks/section_4/cis_4.3.yml b/tasks/section_4/cis_4.3.yml
@@ -2,8 +2,8 @@
 
 - name: "4.3.1 | PATCH | Ensure logrotate is installed"
   package:
-    name: rsyslog-logrotate
-    state: present
+      name: rsyslog-logrotate
+      state: present
   when:
       - rhel9cis_rule_4_3_1
   tags:
@@ -16,9 +16,9 @@
 
 - name: "4.3.2 | PATCH | Ensure logrotate is running and enabled"
   systemd:
-    name: logrotate
-    state: started
-    enabled: true
+      name: logrotate
+      state: started
+      enabled: true
   when:
       - rhel9cis_rule_4_3_2
   tags:
Original file line number	Diff line number	Diff line change
		@@ -18,4 +18,3 @@
		include_tasks: cis_3.4.2.x.yml
		when:
		- rhel9cis_firewall == "nftables"