Mateusz Suski
66 lines
1.4 KiB
YAML
66 lines
1.4 KiB
YAML
---
|
|
- name: Run AIX platform safety prechecks
|
|
ansible.builtin.import_tasks: precheck.yml
|
|
tags:
|
|
- always
|
|
- precheck
|
|
|
|
- name: Harden AIX SSH daemon configuration
|
|
ansible.builtin.import_tasks: ssh.yml
|
|
tags:
|
|
- ssh
|
|
|
|
- name: Apply AIX user account controls
|
|
ansible.builtin.import_tasks: users.yml
|
|
tags:
|
|
- users
|
|
|
|
- name: Apply AIX password policy controls
|
|
ansible.builtin.import_tasks: password_policy.yml
|
|
when: cis_enable_password_policy | bool
|
|
tags:
|
|
- password_policy
|
|
|
|
- name: Apply AIX network hardening controls
|
|
ansible.builtin.import_tasks: network.yml
|
|
when: cis_enable_network_hardening | bool
|
|
tags:
|
|
- network
|
|
|
|
- name: Manage AIX baseline services
|
|
ansible.builtin.import_tasks: services.yml
|
|
tags:
|
|
- services
|
|
|
|
- name: Review AIX filesystem controls
|
|
ansible.builtin.import_tasks: filesystem.yml
|
|
tags:
|
|
- filesystem
|
|
|
|
- name: Validate AIX logging controls
|
|
ansible.builtin.import_tasks: logging.yml
|
|
tags:
|
|
- logging
|
|
|
|
- name: Validate AIX audit controls
|
|
ansible.builtin.import_tasks: audit.yml
|
|
tags:
|
|
- audit
|
|
|
|
- name: Harden AIX cron and at controls
|
|
ansible.builtin.import_tasks: cron.yml
|
|
tags:
|
|
- cron
|
|
|
|
- name: Harden sudo configuration
|
|
ansible.builtin.import_tasks: sudo.yml
|
|
when: cis_manage_sudo | bool
|
|
tags:
|
|
- sudo
|
|
|
|
- name: Run AIX validation postchecks
|
|
ansible.builtin.import_tasks: postcheck.yml
|
|
tags:
|
|
- always
|
|
- postcheck
|