Update section names and conditions

Signed-off-by: Mathieu Fortin <mathieu.fortin@autodesk.com>
ansible-lockdown · Jan 13, 2025 · e5500dd · e5500dd
1 parent 6b0bf59
commit e5500dd
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 8 deletions.
diff --git a/tasks/section_1/main.yml b/tasks/section_1/main.yml
@@ -1,6 +1,6 @@
 ---
 
-- name: "SECTION | 1.1.1.x | Disable unused filesystems"
+- name: "SECTION | 1.1.1.x | Configure Filesystem Kernel Modules"
   ansible.builtin.import_tasks:
       file: cis_1.1.1.x.yml
 
@@ -32,24 +32,23 @@
   ansible.builtin.import_tasks:
       file: cis_1.1.2.7.x.yml
 
-- name: "SECTION | 1.2 | Configure Software Updates"
+- name: "SECTION | 1.2 | Configure Software Updates and Patch Management"
   ansible.builtin.import_tasks:
       file: cis_1.2.x.yml
 
-- name: "SECTION | 1.3 | Filesystem Integrity Checking"
+- name: "SECTION | 1.3 | Congiure Secure Boot Settings"
   ansible.builtin.import_tasks:
       file: cis_1.3.x.yml
-  when: amazon2cis_config_aide
 
-- name: "SECTION | 1.4 | Secure Boot Settings"
+- name: "SECTION | 1.4 | Configure Additional Process Hardening"
   ansible.builtin.import_tasks:
       file: cis_1.4.x.yml
 
-- name: "SECTION | 1.5 | Additional Process Hardening"
+- name: "SECTION | 1.5 | Mandatory Access Control"
   ansible.builtin.import_tasks:
       file: cis_1.5.x.yml
+  when: not amazon2cis_selinux_disable
 
-- name: "SECTION | 1.6 | Mandatory Access Control"
+- name: "SECTION | 1.6 | Configure Command Line Warning Banners"
   ansible.builtin.import_tasks:
       file: cis_1.6.x.yml
-  when: not amazon2cis_selinux_disable
diff --git a/tasks/section_5/main.yml b/tasks/section_5/main.yml
@@ -39,3 +39,4 @@
 - name: "SECTION | 5.3.x | Aide"
   ansible.builtin.import_tasks:
       file: cis_5.3.x.yml
+  when: amazon2cis_config_aide