Fix broken check mode for CentOS 7

This patch fixes some of the tasks that break in check/audit mode.
This is required for the check mode gating to work properly.

These tasks will soon be converted to something that doesn't use
the fail module.

Change-Id: I9940cc3457a1008f7c86482906537a916d523223
This commit is contained in:
Major Hayden 2016-06-03 10:49:52 -05:00
parent 41260da8ac
commit 2683e5679a
1 changed files with 12 additions and 6 deletions

View File

@ -28,7 +28,7 @@
- name: Check if 'all_squash' appears in /etc/exports (for V-38460)
shell: grep all_squash /etc/exports
register: v38460_result
changed_when: v38460_result.rc == 0
changed_when: v38460_result | success
failed_when: False
when: exports.stat.exists
tags:
@ -39,8 +39,11 @@
- name: V-38460 - The NFS server must not have the all_squash option enabled
fail:
msg: "Remove all_squash from /etc/exports"
changed_when: v38460_result.rc == 0
when: exports.stat.exists and v38460_result.rc == 0
changed_when: v38460_result | success
when:
- exports.stat.exists
- v38460_result | success
- not check_mode
tags:
- nfs
- cat3
@ -49,7 +52,7 @@
- name: Check if 'insecure_locks' appears in /etc/exports (for V-38677)
shell: grep insecure_locks /etc/exports
register: v38677_result
changed_when: v38677_result.rc == 0
changed_when: v38677_result | success
failed_when: False
when: exports.stat.exists
tags:
@ -60,8 +63,11 @@
- name: V-38677 - The NFS server must not have the insecure_locks option enabled
fail:
msg: "Remove insecure_locks from /etc/exports"
changed_when: v38677_result.rc == 0
when: exports.stat.exists and v38677_result.rc == 0
changed_when: v38677_result | success
when:
- exports.stat.exists
- v38677_result | success
- not check_mode
tags:
- nfs
- cat3