Update cis_5.1.x.yml

Signed-off-by: Wykx <79835144+Wykx-Sama@users.noreply.github.com>
ansible-lockdown · Jul 11, 2024 · 446d762 · 446d762
1 parent 632f6b8
commit 446d762
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/tasks/section_5/cis_5.1.x.yml b/tasks/section_5/cis_5.1.x.yml
@@ -124,7 +124,7 @@
             state: '{{ "file" if  rhel9cis_5_1_8_cron_allow_state.stat.exists else "touch" }}'
             owner: root
             group: root
-            mode: '0600'
+            mode: '0640'
   when:
       - rhel9cis_rule_5_1_8
   tags:
@@ -152,7 +152,7 @@
             state: '{{ "file" if  rhel9cis_5_1_9_at_allow_state.stat.exists else "touch" }}'
             owner: root
             group: root
-            mode: '0600'
+            mode: '0640'
   when:
       - rhel9cis_rule_5_1_9
   tags: