Merge pull request #466 from layluke/462

Excluding non-interactive logins shells from being parsed
ansible-lockdown · Jul 17, 2024 · a85ccc0 · a85ccc0
2 parents 3026fd9 + 2db15ef
commit a85ccc0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tasks/parse_etc_passwd.yml b/tasks/parse_etc_passwd.yml
@@ -2,7 +2,7 @@
 - name: "PRELIM | {{ rhel7stig_passwd_tasks }} | Parse /etc/passwd"
   block:
       - name: "PRELIM | {{ rhel7stig_passwd_tasks }} | Parse /etc/passwd"
-        ansible.builtin.shell: cat /etc/passwd
+        ansible.builtin.shell: cat /etc/passwd | grep -v '/sbin/nologin\|/usr/sbin/nologin'
         changed_when: false
         check_mode: false
         register: rhel7stig_passwd_file_audit