CIS 4.5.1.6 difok regex incorrectly matches any line

Signed-off-by: Karl DeBisschop <[email protected]>
ansible-lockdown · Nov 27, 2023 · ba0d9b3 · ba0d9b3
1 parent f5d0a54
commit ba0d9b3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tasks/section_4/cis_4.5.1.x.yml b/tasks/section_4/cis_4.5.1.x.yml
@@ -173,7 +173,7 @@
 - name: "4.5.1.6 | PATCH | Ensure the number of changed characters in a new password is configured"
   ansible.builtin.lineinfile:
       path: /etc/security/pwquality.conf
-      regexp: '^(#\s+|)difok|'
+      regexp: '^(#\s+|)difok'
       line: 'difok = {{ ubtu20cis_pass.character_changed }}'
       create: true
       mode: 0640