updated 7.1.2 based on issue#5

Signed-off-by: Mark Bolwell <[email protected]>
ansible-lockdown · Jan 21, 2025 · 87ee7aa · 87ee7aa
1 parent 23a8188
commit 87ee7aa
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/tasks/section_7/cis_7.1.x.yml b/tasks/section_7/cis_7.1.x.yml
@@ -209,7 +209,7 @@
     warn_control_id: '7.1.12'
   block:
     - name: "7.1.12 | AUDIT | Ensure no files or directories without an owner and a group exist | Get list files or directories"
-      ansible.builtin.command: find ({{ deb12cis_exclude_unowned_search_path }}) {{ item.mount }} -xdev \( -nouser -o -nogroup \) -not -fstype nfs
+      ansible.builtin.command: find {{ item.mount }} -xdev -type f {{ deb12cis_exclude_unowned_search_path }} \( -nouser -o -nogroup \) -not -fstype nfs
       changed_when: false
       failed_when: false
       check_mode: false
@@ -240,7 +240,7 @@
       ansible.builtin.file:
         path: "{{ item }}"
         owner: "{{ deb12cis_unowned_owner }}"
-        group: "{{ deb12cis_unowned_group }}"
+        group: "{{ deb12cis_ungrouped_group }}"
       with_items:
         - "{{ discovered_unowned_files_flatten }}"