public/Infrastrucutre as Code/Ansible/roles/cis_hardening/file_permissions/tasks/main.yml

---
- name: Ensure system files and directories have correct ownership and permissions
  ansible.builtin.file:
    path: "{{ file_item.path }}"
    owner: root
    group: root
    mode: "{{ file_item.mode }}"
    state: "{{ file_item.state }}"
  loop: "{{ file_permissions_list }}"
  loop_control:
    loop_var: file_item