Merge pull request #120 from kdebisschop/CIS-4_5_1_6-difok-regex-matc…

…hes-any-line CIS 4.5.1.6 difok regex incorrectly matches any line
ansible-lockdown · Dec 11, 2023 · fbc71f0 · fbc71f0
2 parents 5eaa8c3 + ba0d9b3
commit fbc71f0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tasks/section_4/cis_4.5.1.x.yml b/tasks/section_4/cis_4.5.1.x.yml
@@ -173,7 +173,7 @@
 - name: "4.5.1.6 | PATCH | Ensure the number of changed characters in a new password is configured"
   ansible.builtin.lineinfile:
       path: /etc/security/pwquality.conf
-      regexp: '^(#\s+|)difok|'
+      regexp: '^(#\s+|)difok'
       line: 'difok = {{ ubtu20cis_pass.character_changed }}'
       create: true
       mode: 0640