mirror of
https://github.com/nikdoof/ansible-cis.git
synced 2025-12-13 09:32:15 +00:00
16 lines
395 B
YAML
16 lines
395 B
YAML
---
|
|
- name: Copy main CIS benchmark ruleset
|
|
ansible.builtin.copy:
|
|
src: auditd/cis-hardening.rules
|
|
dest: /etc/audit/rules.d/cis-hardening.rules
|
|
owner: root
|
|
group: root
|
|
mode: "0600"
|
|
- name: Copy privileged commands ruleset
|
|
ansible.builtin.copy:
|
|
src: auditd/privileged.rules
|
|
dest: /etc/audit/rules.d/privileged.rules
|
|
owner: root
|
|
group: root
|
|
mode: "0600"
|