missing grub check fails when using sysctl

Signed-off-by: Dan D <[email protected]>
ansible-lockdown · Nov 30, 2023 · 0c06607 · 0c06607
1 parent fa365a3
commit 0c06607
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/tasks/section_3/cis_3.1.x.yml b/tasks/section_3/cis_3.1.x.yml
@@ -26,6 +26,7 @@
             line: '\1 ipv6.disable=1"'
             backrefs: true
         when:
+            - ubtu22cis_ipv6_disable == 'grub'
             - ipv6disable_replaced is not changed
             - "'ipv6.disable' not in ubtu22cis_3_1_1_cmdline_settings.stdout"
         notify: Grub update