[BUG] Debian about ansible-role-hardening HOT 8 CLOSED

I've added the same check for crontab, https://github.com/konstruktoid/ansible-role-hardening/pull/382/files

from ansible-role-hardening.

Hi I have tested this fix. It work well !
Thank you for your help !

from ansible-role-hardening.

Hi @sgnsys3 and thanks for reporting this.
I'll have a look as soon as possible.

from ansible-role-hardening.

Running the tests it seems that directory exists by default:

TASK [ansible-role-hardening : Set cron permissions] ***************************
changed: [bullseye] => (item=/etc/cron.d)
changed: [bookworm] => (item=/etc/cron.d)
changed: [testing] => (item=/etc/cron.d)
changed: [bullseye] => (item=/etc/cron.daily)
changed: [bookworm] => (item=/etc/cron.daily)
changed: [testing] => (item=/etc/cron.daily)
changed: [bullseye] => (item=/etc/cron.hourly)
changed: [bookworm] => (item=/etc/cron.hourly)
changed: [testing] => (item=/etc/cron.hourly)
changed: [bullseye] => (item=/etc/cron.weekly)
changed: [bookworm] => (item=/etc/cron.weekly)
changed: [bullseye] => (item=/etc/cron.monthly)
changed: [testing] => (item=/etc/cron.weekly)
changed: [bookworm] => (item=/etc/cron.monthly)
changed: [testing] => (item=/etc/cron.monthly)

but I'll write a PR that handles a missing cron folder.

from ansible-role-hardening.

could try with #382?

from ansible-role-hardening.

Hi, I have tried #382 The problem above was solved, and Found new error "/etc/crontab is absent. cannot continue"
The root cause is package cron was not installed on the OS.
In this case, Do we need to install cron prior to hardening or Check If cron is installed then hardening cron ?

from ansible-role-hardening.

Ah, yes. cron is assumed to be installed. I'll rewrite the task so it only runs if cron is installed

from ansible-role-hardening.

Closed by #382

from ansible-role-hardening.