diff --git a/README.md b/README.md index a2fea12..c934382 100644 --- a/README.md +++ b/README.md @@ -140,10 +140,10 @@ ubuntu1804cis_time_synchronization_servers: config: "minpoll 8" ``` -##### - name: "SCORED | 1.1.5 | PATCH | Ensure noexec option set on /tmp partition" -It is not implemented, noexec for /tmp will disrupt apt. /tmp contains executable scripts during package installation -``` - +##### 1.1.5 | PATCH | Ensure noexec option set on /tmp partition +It is not implemented because noexec for /tmp will disrupt apt. /tmp contains executable scripts during package installation +```yaml +ubuntu1804cis_rule_1_1_5: false ``` ##### 1.5.3 | PATCH | Ensure authentication required for single user mode It is disabled by default as it is setting random password for root. To enable it set: diff --git a/tasks/section1.yml b/tasks/section1.yml index 8ba92ba..f50c0e6 100644 --- a/tasks/section1.yml +++ b/tasks/section1.yml @@ -258,7 +258,7 @@ - filesystems - rule_1.1.1.8 -- name: "SCORED | 1.1.2 | PATCH | Ensure separate partition exists for /tmp | enable and start/restart tmp.mount" +- name: "SCORED | 1.1.2 | PATCH | Ensure /tmp is configured | enable and start/restart tmp.mount" copy: src: "{{ tmp_mount_file[ansible_os_family] }}" dest: /etc/systemd/system/tmp.mount @@ -278,7 +278,7 @@ - patch - rule_1.1.2 -- name: "SCORED | 1.1.2 | PATCH | Ensure separate partition exists for /tmp | enable and start/restart tmp.mount" +- name: "SCORED | 1.1.2 | PATCH | Ensure /tmp is configured | enable and start/restart tmp.mount" systemd: name: tmp.mount daemon_reload: yes