Merge pull request #42 from mfortin/section-naming

Update section names and conditions
ansible-lockdown · Jan 14, 2025 · 3e6622c · 3e6622c
2 parents 6b0bf59 + db30778
commit 3e6622c
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 8 deletions.
diff --git a/tasks/section_1/main.yml b/tasks/section_1/main.yml
@@ -1,6 +1,6 @@
 ---
 
-- name: "SECTION | 1.1.1.x | Disable unused filesystems"
+- name: "SECTION | 1.1.1.x | Configure FileSystem Kernel Modules"
   ansible.builtin.import_tasks:
       file: cis_1.1.1.x.yml
 
@@ -32,24 +32,23 @@
   ansible.builtin.import_tasks:
       file: cis_1.1.2.7.x.yml
 
-- name: "SECTION | 1.2 | Configure Software Updates"
+- name: "SECTION | 1.2 | Configure Software Updates and Patch Management"
   ansible.builtin.import_tasks:
       file: cis_1.2.x.yml
 
-- name: "SECTION | 1.3 | Filesystem Integrity Checking"
+- name: "SECTION | 1.3 | Configure Secure Boot Settings"
   ansible.builtin.import_tasks:
       file: cis_1.3.x.yml
-  when: amazon2cis_config_aide
 
-- name: "SECTION | 1.4 | Secure Boot Settings"
+- name: "SECTION | 1.4 | Configure Additional Process Hardening"
   ansible.builtin.import_tasks:
       file: cis_1.4.x.yml
 
-- name: "SECTION | 1.5 | Additional Process Hardening"
+- name: "SECTION | 1.5 | Mandatory Access Control"
   ansible.builtin.import_tasks:
       file: cis_1.5.x.yml
+  when: not amazon2cis_selinux_disable
 
-- name: "SECTION | 1.6 | Mandatory Access Control"
+- name: "SECTION | 1.6 | Configure Command Line Warning Banners"
   ansible.builtin.import_tasks:
       file: cis_1.6.x.yml
-  when: not amazon2cis_selinux_disable
diff --git a/tasks/section_5/main.yml b/tasks/section_5/main.yml
@@ -39,3 +39,4 @@
 - name: "SECTION | 5.3.x | Aide"
   ansible.builtin.import_tasks:
       file: cis_5.3.x.yml
+  when: amazon2cis_config_aide