Fixed Mode Per CIS v1.0.0

Signed-off-by: Stephen Williams <[email protected]>
ansible-lockdown · Sep 26, 2024 · ae4fa91 · ae4fa91
1 parent 47a41ad
commit ae4fa91
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/tasks/section_6/cis_6.1.x.yml b/tasks/section_6/cis_6.1.x.yml
@@ -65,7 +65,7 @@
       path: /etc/shadow
       owner: root
       group: root
-      mode: 0000
+      mode: 0640
   when:
       - debian11cis_rule_6_1_5
   tags:
@@ -80,7 +80,7 @@
       path: /etc/shadow-
       owner: root
       group: root
-      mode: 0000
+      mode: 0640
   when:
       - debian11cis_rule_6_1_6
   tags:
@@ -95,7 +95,7 @@
       path: /etc/gshadow
       owner: root
       group: root
-      mode: 0000
+      mode: 0640
   when:
       - debian11cis_rule_6_1_7
   tags:
@@ -110,7 +110,7 @@
       path: /etc/gshadow-
       owner: root
       group: root
-      mode: 0000
+      mode: 0640
   when:
       - debian11cis_rule_6_1_8
   tags: