change order - first remount, then manage fstab

Signed-off-by: Ludwig Bayerlein <bayerlein@bayerlein-networks.com>
dev-sec · Mar 3, 2022 · 1f8ebaa · 1f8ebaa
1 parent e6a529f
commit 1f8ebaa
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/roles/os_hardening/tasks/minimize_access.yml b/roles/os_hardening/tasks/minimize_access.yml
@@ -105,3 +105,12 @@
     owner: 'root'
     group: 'root'
     mode: '{{ os_tmp_dir_mode }}'
+
+- name: Harden mount options for tmp
+  mount:
+    path: /tmp
+    src: '{{ os_tmp_mnt_src }}'
+    fstype: '{{ os_tmp_mnt_filesystem }}'
+    opts: '{{ os_tmp_mnt_options }}'
+    state: present
+  when: os_tmp_mnt_enabled | bool