diff --git a/tasks/rhel7stig/file_perms.yml b/tasks/rhel7stig/file_perms.yml index 2325cc30..394fe69f 100644 --- a/tasks/rhel7stig/file_perms.yml +++ b/tasks/rhel7stig/file_perms.yml @@ -105,9 +105,10 @@ dest: "{{ item.dir }}" owner: "{{ item.name }}" group: "{{ item.group.name }}" - mode: "u-X,g-ws,o-rwxt" + mode: "g-ws,o-rwxt" when: - item.uid >= 1000 + - item.name != 'nobody' - security_set_home_directory_permissions_and_owners | bool with_items: "{{ user_list.users | selectattr('uid', 'greaterthan', 999) | list }}" tags: diff --git a/tests/test.yml b/tests/test.yml index 467bbccc..44cf8cc7 100644 --- a/tests/test.yml +++ b/tests/test.yml @@ -93,6 +93,7 @@ security_rhel7_remove_shosts_files: yes security_search_for_invalid_owner: yes security_search_for_invalid_group_owner: yes + security_set_home_directory_permissions_and_owners: yes security_set_minimum_password_lifetime: yes security_unattended_upgrades_enabled: yes security_unattended_upgrades_notifications: yes