Skip to content

Commit

Permalink
add symlink following to find task
Browse files Browse the repository at this point in the history
Signed-off-by: Sebastian Gumprich <github@gumpri.ch>
  • Loading branch information
Sebastian Gumprich committed Mar 24, 2019
1 parent 4f4fe89 commit 744c7f0
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 2 deletions.
2 changes: 1 addition & 1 deletion tasks/main.yml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
---

- include_tasks: hardening.yml
- import_tasks: hardening.yml
when: os_hardening_enabled
3 changes: 2 additions & 1 deletion tasks/minimize_access.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
- name: find files with write-permissions for group
shell: "find {{ item }} -perm /go+w -type f"
shell: "find -L {{ item }} -perm /go+w -type f"
with_flattened:
- '/usr/local/sbin'
- '/usr/local/bin'
Expand All @@ -10,6 +10,7 @@
- '/bin'
- "{{ os_env_extra_user_paths }}"
register: minimize_access_directories
ignore_errors: true
changed_when: false

- name: minimize access on found files
Expand Down

0 comments on commit 744c7f0

Please sign in to comment.