From c39d8bb039532f130d03f49004dabb30ba5fffdb Mon Sep 17 00:00:00 2001 From: Mark Bolwell Date: Wed, 19 Jun 2024 16:56:29 +0100 Subject: [PATCH] removed blank lines Signed-off-by: Mark Bolwell --- tasks/section_3/cis_3.4.3.x.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/tasks/section_3/cis_3.4.3.x.yml b/tasks/section_3/cis_3.4.3.x.yml index 5f2ee877..aa24bead 100644 --- a/tasks/section_3/cis_3.4.3.x.yml +++ b/tasks/section_3/cis_3.4.3.x.yml @@ -186,7 +186,6 @@ - '"iif \"lo\" accept" not in rhel7cis_3_4_3_5_iiflo.stdout' ansible.builtin.shell: nft add rule inet "{{ rhel7cis_nft_tables_tablename }}" input iif lo accept - - name: "3.4.3.5 | PATCH | Ensure nftables loopback traffic is configured | Set ip sddr rule" when: - '"ip saddr 127.0.0.0/8 counter packets 0 bytes 0 drop" not in rhel7cis_3_4_3_5_ipsaddr.stdout' @@ -237,7 +236,6 @@ - '"ip protocol icmp ct state established accept" not in rhel7cis_3_4_3_6_inconnectionrule.stdout' ansible.builtin.shell: nft add rule inet "{{ rhel7cis_nft_tables_tablename }}" input ip protocol icmp ct state established accept - - name: "3.4.3.6 | PATCH | Ensure nftables outbound and established connections are configured | Add output tcp new, related, established accept policy" when: - '"ip protocol tcp ct state established,related,new accept" not in rhel7cis_3_4_3_6_outconnectionrule.stdout'