Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Formatting error with RHEL8 configure_ssh_crypto_policy #10954

Closed
Enquier opened this issue Aug 3, 2023 · 2 comments · Fixed by #11008
Closed

Formatting error with RHEL8 configure_ssh_crypto_policy #10954

Enquier opened this issue Aug 3, 2023 · 2 comments · Fixed by #11008
Labels
RHEL8 Red Hat Enterprise Linux 8 product related. STIG STIG Benchmark related.

Comments

@Enquier
Copy link

Enquier commented Aug 3, 2023 •
edited
Loading

Description of problem:

configure_ssh_crypto_policy is failing due to a regex formatting error in the lineinfile module on RHEL8

SCAP Security Guide Version:

RHEL8_STIG

Operating System Version:

RHEL8.8
Ansible 2.15.2
Python 3.11

Steps to Reproduce:

  1. Attempt to run playbook using the above configuration --tag configure_ssh_crypto_policy

Actual Results:

raise source.error('global flags not at the start '
    re.error: global flags not at the start of the expression at position 4

Expected Results:

changed=false changed=false 
  backup: ''
  found: 0
  msg: ''
  backup: ''
  found: 0
  msg: ''

Additional Information/Debugging Steps:

If you move the (?i) to the front of the Regex this issue is resolved
@Enquier
Copy link
Author

Enquier commented Aug 3, 2023

https://stackoverflow.com/questions/75895460/the-error-was-re-error-global-flags-not-at-the-start-of-the-expression-at-posi

@marcusburghardt marcusburghardt added RHEL8 Red Hat Enterprise Linux 8 product related. STIG STIG Benchmark related. labels Aug 8, 2023
@marcusburghardt
Copy link
Member

FYI @Mab879 and @ggbecker

ggbecker added a commit to ggbecker/content that referenced this issue Aug 22, 2023
@ggbecker
Fix ansible remediation of configure_ssh_crypto_policy.
2592332 
The (?i) needs to appear first in the regex otherwise it throws an
error.

https://stackoverflow.com/questions/75895460/the-error-was-re-error-global-flags-not-at-the-start-of-the-expression-at-posi

Fixes: ComplianceAsCode#10954
@ggbecker ggbecker mentioned this issue Aug 22, 2023
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
RHEL8 Red Hat Enterprise Linux 8 product related. STIG STIG Benchmark related.
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Fix ansible remediation of configure_ssh_crypto_policy ggbecker/content
2 participants
@marcusburghardt @Enquier