From e06a95fdbc0f1a8a23264ca4ec39b8181602c69b Mon Sep 17 00:00:00 2001
From: Sandwich <sandwich@archworks.co>
Date: Tue, 21 Jan 2025 22:34:01 +0100
Subject: [PATCH] Fix CIS applienc for RHEL8

---
 roles/cis/tasks/main.yml           | 2 +-
 roles/configuration/tasks/main.yml | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/roles/cis/tasks/main.yml b/roles/cis/tasks/main.yml
index efb6b35..8d2f92f 100644
--- a/roles/cis/tasks/main.yml
+++ b/roles/cis/tasks/main.yml
@@ -95,7 +95,7 @@
         - /mnt/etc/pam.d/password-auth
 
     - name: Configure System Cryptography Policy
-      when: os in ["almalinux", "fedora", "rhel8", "rhel9", "rocky"]
+      when: os in ["almalinux", "rhel9", "rocky"]
       ansible.builtin.command:
         arch-chroot /mnt /usr/bin/update-crypto-policies --set DEFAULT:NO-SHA1
 
diff --git a/roles/configuration/tasks/main.yml b/roles/configuration/tasks/main.yml
index 59d5fe8..8b163c2 100644
--- a/roles/configuration/tasks/main.yml
+++ b/roles/configuration/tasks/main.yml
@@ -232,8 +232,8 @@
             group: root
             mode: '0644'
           loop:
-            - /etc/issue
-            - /etc/issue.net
+            - /mnt/etc/issue
+            - /mnt/etc/issue.net
 
     - name: Setup Network
       block: