Add LogLevel VERBOSE for CIS compliance. (#15)

ansiblebook · Mar 15, 2023 · 78ea3ad · 78ea3ad
1 parent bc01f6b
commit 78ea3ad
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/tasks/main.yml b/tasks/main.yml
@@ -52,9 +52,12 @@
     regexp: "{{ item.regexp }}"
     line: "{{ item.line }}"
     state: present
-  with_items:
+  loop:
     - regexp: '^(#)?Banner'
       line: 'Banner /etc/issue'
+    - regexp: '^(#)?LogLevel'
+      line: 'LogLevel VERBOSE'
+  notify: Restart sshd
 
 - name: Apply STRICT hardening for sshd
   when:
@@ -122,4 +125,5 @@
     state: absent
   notify: Restart sshd
   when: crypto_policy in ['FIPS', 'FIPS:OSPP']
+
 ...