Skip to content
This repository was archived by the owner on Dec 26, 2020. It is now read-only.

Commit 9560f33

Browse files
author
Sebastian Gumprich
committed
Change last task again
1 parent be38ac7 commit 9560f33

File tree

1 file changed

+1
-1
lines changed
  • roles/ansible-ssh-hardening/tasks

1 file changed

+1
-1
lines changed

roles/ansible-ssh-hardening/tasks/main.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,4 +55,4 @@
5555

5656
- name: remove selinux-policy when Pam is used, because Allowing sshd to read the shadow file directly is considered a potential security risk (http://danwalsh.livejournal.com/12333.html)
5757
shell: semodule -r ssh_password
58-
when: selinux_policy_state.stdout != 'Disabled' and ssh_use_pam
58+
when: (selinux_installed.rc == 0) and ssh_use_pam

0 commit comments

Comments
 (0)