Fix broken check mode for CentOS 7
This patch fixes some of the tasks that break in check/audit mode. This is required for the check mode gating to work properly. These tasks will soon be converted to something that doesn't use the fail module. Change-Id: I9940cc3457a1008f7c86482906537a916d523223
This commit is contained in:
parent
41260da8ac
commit
2683e5679a
@ -28,7 +28,7 @@
|
||||
- name: Check if 'all_squash' appears in /etc/exports (for V-38460)
|
||||
shell: grep all_squash /etc/exports
|
||||
register: v38460_result
|
||||
changed_when: v38460_result.rc == 0
|
||||
changed_when: v38460_result | success
|
||||
failed_when: False
|
||||
when: exports.stat.exists
|
||||
tags:
|
||||
@ -39,8 +39,11 @@
|
||||
- name: V-38460 - The NFS server must not have the all_squash option enabled
|
||||
fail:
|
||||
msg: "Remove all_squash from /etc/exports"
|
||||
changed_when: v38460_result.rc == 0
|
||||
when: exports.stat.exists and v38460_result.rc == 0
|
||||
changed_when: v38460_result | success
|
||||
when:
|
||||
- exports.stat.exists
|
||||
- v38460_result | success
|
||||
- not check_mode
|
||||
tags:
|
||||
- nfs
|
||||
- cat3
|
||||
@ -49,7 +52,7 @@
|
||||
- name: Check if 'insecure_locks' appears in /etc/exports (for V-38677)
|
||||
shell: grep insecure_locks /etc/exports
|
||||
register: v38677_result
|
||||
changed_when: v38677_result.rc == 0
|
||||
changed_when: v38677_result | success
|
||||
failed_when: False
|
||||
when: exports.stat.exists
|
||||
tags:
|
||||
@ -60,8 +63,11 @@
|
||||
- name: V-38677 - The NFS server must not have the insecure_locks option enabled
|
||||
fail:
|
||||
msg: "Remove insecure_locks from /etc/exports"
|
||||
changed_when: v38677_result.rc == 0
|
||||
when: exports.stat.exists and v38677_result.rc == 0
|
||||
changed_when: v38677_result | success
|
||||
when:
|
||||
- exports.stat.exists
|
||||
- v38677_result | success
|
||||
- not check_mode
|
||||
tags:
|
||||
- nfs
|
||||
- cat3
|
||||
|
Loading…
Reference in New Issue
Block a user