Merge pull request #63 from hardening-io/suid_set_def_var

Suid set def var, fix #64
dev-sec · Jan 30, 2016 · eedd504 · eedd504
2 parents 7bc186e + a960535
commit eedd504
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tasks/suid_sgid.yml b/tasks/suid_sgid.yml
@@ -20,5 +20,5 @@
 - name: remove suid/sgid bit from all binaries except in system and user whitelist
   file: path='{{item}}' mode='a-s' state=file follow=yes
   with_items:
-    - '{{ suid | difference(os_security_suid_sgid_whitelist) }}'
+    - '{{ suid | default(omit) | difference(os_security_suid_sgid_whitelist) }}'
   when: os_security_suid_sgid_remove_from_unknown