add ansible remediation (currently broken)

ComplianceAsCode · Sep 8, 2020 · f72aeee · f72aeee
1 parent 649880f
commit f72aeee
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/linux_os/guide/services/obsolete/tftp/tftpd_uses_secure_mode/ansible/shared.yml b/linux_os/guide/services/obsolete/tftp/tftpd_uses_secure_mode/ansible/shared.yml
@@ -0,0 +1,15 @@
+# platform = Oracle Linux 7,Oracle Linux 8,Red Hat Enterprise Linux 6,Red Hat Enterprise Linux 7,Red Hat Enterprise Linux 8,Red Hat Virtualization 4,WRLinux 1019
+# reboot = false
+# complexity = low
+# strategy = configure
+# disruption = low
+
+{{{ ansible_instantiate_variables("tftpd_secure_directory") }}}
+
+- name: "Ensure that TFTP server is configured to start with secure directory"
+  lineinfile:
+    path: "/etc/xinetd.d/tftp"
+    regexp: '^[\s]*(serger_args[\s]+=[\s]+.*?)(-s[\s]+[/\.\w]+)(.*)$'
+    line: '\1 -s {{ tftpd_secure_directory {{ \3'
+    state: present
+    backrefs: true