Skip to content

Conversation

@prince03batra
Copy link

Implemented configuration to enforce authentication in single-user and emergency modes by updating rescue.service and emergency.service to use /sbin/sulogin. Ensures compliance with CIS 1.3.1.


#1.3 configuresecureboot
- name: Reload systemd
ansible.builtin.command: systemctl daemon-reload
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Use ansible module instead of command

tasks/main.yaml Outdated
- name: Debian realted Specification
include_tasks: configure_Debian.yaml
- name: Ubuntu related Specification
include_tasks: ubuntu.yaml
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why we doing Debian related change

@oo4abhishek oo4abhishek merged commit b504234 into v2.0.0 Nov 5, 2025
@oo4abhishek oo4abhishek deleted the configure_secure_boot_al2 branch November 5, 2025 11:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants