Collapse double-management of user.cfg file

plus3it · Mar 13, 2024 · bf9a8d3 · bf9a8d3
1 parent cfbb2ef
commit bf9a8d3
Showing 1 changed file with 7 additions and 13 deletions.
diff --git a/ash-linux/el8/STIGbyID/cat1/RHEL-08-010150.sls b/ash-linux/el8/STIGbyID/cat1/RHEL-08-010150.sls
@@ -41,30 +41,24 @@ notify_{{ stig_id }}-skipSet:
     - stateful: True
     - cwd: /root
 {%- else %}
-user_cfg_permissions-{{ stig_id }}:
+user_cfg_content-{{ stig_id }}:
   file.managed:
     - name: '{{ grubPassFile }}'
-    - user: 'root'
-    - owner: 'root'
+    - contents: |-
+        GRUB2_PASSWORD={{ grubEncryptedPass }}
     - mode: '000600'
+    - onchanges_in:
+      - cmd: regen_grubCfg-{{ stig_id }}
     - onlyif:
       - [[ ! -d /sys/firmware/efi/ ]]
+    - owner: 'root'
     - replace: false
     - selinux:
         serange: 's0'
         serole: 'object_r'
         setype: 'boot_t'
         seuser: 'unconfined_u'
-
-user_cfg_content-{{ stig_id }}:
-  file.managed:
-    - name: '{{ grubPassFile }}'
-    - contents: |-
-        GRUB2_PASSWORD={{ grubEncryptedPass }}
-    - onchanges_in:
-      - cmd: regen_grubCfg-{{ stig_id }}
-    - onchanges:
-      - file: user_cfg_permissions-{{ stig_id }}
+    - user: 'root'
 
 grubuser_superDef-{{ grubUserFile }}-{{ stig_id }}:
   file.replace: