Merge pull request ComplianceAsCode#6574 from vojtapolasek/fix_world_…

…writable_dirs_root_owned_ansible fix ansible remediation of dir_perms_world_writable_root_owned
brett060102 · Jan 28, 2021 · 3ada19b · 3ada19b
2 parents 84a43a3 + a53b519
commit 3ada19b
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 1 deletion.
diff --git a/..._os/guide/system/permissions/files/dir_perms_world_writable_root_owned/ansible/shared.yml b/..._os/guide/system/permissions/files/dir_perms_world_writable_root_owned/ansible/shared.yml
@@ -30,7 +30,7 @@
 
 - name: "Create empty list of excluded paths"
   set_fact:
-    excluded_paths: "[]"
+    excluded_paths: []
 
 - name: "Detect nonlocal file systems and add them to excluded paths"
   set_fact: 

diff --git a/...files/dir_perms_world_writable_root_owned/tests/world_writable_dir_on_nonlocal_fs.fail.sh b/...files/dir_perms_world_writable_root_owned/tests/world_writable_dir_on_nonlocal_fs.fail.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+# packages = nfs-utils
+
+mkdir -p /tmp/testdir/testdir2
+mkdir /tmp/testmount
+chown 2 /tmp/testdir/testdir2
+chmod 777 /tmp/testdir/testdir2
+
+echo '/tmp/testdir localhost(rw)' > /etc/exports
+systemctl restart nfs-server
+mount.nfs localhost:/tmp/testdir /tmp/testmount