updated to capture great options #39

Signed-off-by: Mark Bolwell <[email protected]>
ansible-lockdown · Nov 11, 2024 · 9d2b4e0 · 9d2b4e0
1 parent 4a326a0
commit 9d2b4e0
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/section_5/cis_5.3/cis_5.3.3.yml b/section_5/cis_5.3/cis_5.3.3.yml
@@ -3,11 +3,11 @@
 command:
   log_sudoers_d:
     title: 5.3.3 | Ensure sudo log file exists | sudoers.d
-    exec: 'grep -Ec "^Defaults.*logfile=\"/var/log/.*\.log\"" /etc/sudoers /etc/sudoers.d/*'
+    exec: 'grep -Ec "^Defaults.*logfile=(\"|)/var/log/.*\.log(\"|)" /etc/sudoers /etc/sudoers.d/*'
     exit-status:
       lt: 3
     stdout:
-    - '/[1-99]/'
+    - '/.*:[1-99]/'
     meta:
       server: 1
       workstation: 1