Check_mode: false, otherwise gets skipped

Signed-off-by: Ionut Pruteanu <[email protected]>
ansible-lockdown · Feb 6, 2024 · c51712e · c51712e
1 parent 594e52a
commit c51712e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/tasks/section_5/cis_5.6.x.yml b/tasks/section_5/cis_5.6.x.yml
@@ -103,7 +103,7 @@
             grep -E -q "^session\s*(optional|requisite|required)\s*pam_umask.so$" /etc/pam.d/system-auth
         ignore_errors: true
         no_log: true
-        check_mode: true
+        check_mode: false
         register: pam_umask_line_present_system
 
       - name: "5.6.5 | PATCH | Ensure default user umask is 027 or more restrictive | If needed, load session umask.so in system-auth"
@@ -119,7 +119,7 @@
             grep -E -q "^session\s*(optional|requisite|required)\s*pam_umask.so$" /etc/pam.d/password-auth
         ignore_errors: true
         no_log: true
-        check_mode: true
+        check_mode: false
         register: pam_umask_line_present_password
 
       - name: "5.6.5 | PATCH | Ensure default user umask is 027 or more restrictive | If needed, load session umask.so in password-auth"