Merge pull request #133 from kdebisschop/AppArmor-bootloader-quoting

Fix regex to prevent swallowing closing quote in bootloader config.
ansible-lockdown · Jan 26, 2024 · 61dc2e2 · 61dc2e2
2 parents 6884015 + 4830ea2
commit 61dc2e2
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/tasks/section_1/cis_1.6.x.yml b/tasks/section_1/cis_1.6.x.yml
@@ -39,8 +39,8 @@
             regexp: "{{ item.regexp }}"
             replace: "{{ item.replace }}"
         with_items:
-            - { regexp: 'apparmor=\S+', replace: 'apparmor=1' }
-            - { regexp: 'security=\S+', replace: 'security=apparmor' }
+            - { regexp: 'apparmor=[^\s"]+', replace: 'apparmor=1' }
+            - { regexp: 'security=[^\s"]+', replace: 'security=apparmor' }
         when:
             - "'apparmor' in ubtu20cis_1_6_1_2_cmdline_settings.stdout"
             - "'security' in ubtu20cis_1_6_1_2_cmdline_settings.stdout"