fix: deep analysis audit — no_log, resolv.conf, service conflicts, lint

2026-02-20 18:34:59 +01:00
parent 09b3ed44ba
commit b6d06dd96d
17 changed files with 66 additions and 20 deletions
--- a/roles/cis/tasks/auth.yml
+++ b/roles/cis/tasks/auth.yml
@@ -10,6 +10,13 @@
    dest: "{{ item }}"
    regexp: "\\s*nullok"
    replace: ""
-  loop:
-    - /mnt/etc/pam.d/system-auth
-    - /mnt/etc/pam.d/password-auth
+  loop: >-
+    {{
+      ['/mnt/etc/pam.d/system-auth', '/mnt/etc/pam.d/password-auth']
+      if is_rhel | bool
+      else (
+        ['/mnt/etc/pam.d/common-auth', '/mnt/etc/pam.d/common-password']
+        if is_debian | bool
+        else []
+      )
+    }}