summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMatthieu Saulnier <fantom@fedoraproject.org>2018-09-01 11:43:49 +0200
committerMatthieu Saulnier <fantom@fedoraproject.org>2018-09-01 11:43:49 +0200
commit4406b15c36e3ea5f09380fd1de24090a7611d692 (patch)
tree3e87a1ebe8d0bb0ba0e758033ce772e7396b3db7
parentc1ac9e6ae9037a56b952e0eaab1759bee504d1d5 (diff)
downloadplaybooks-ansible-4406b15c36e3ea5f09380fd1de24090a7611d692.tar.gz
playbooks-ansible-4406b15c36e3ea5f09380fd1de24090a7611d692.tar.xz
playbooks-ansible-4406b15c36e3ea5f09380fd1de24090a7611d692.zip
Remove automatic reboot cron task and add rkhunter propupd after system update
-rw-r--r--roles/dnsserver/files/reboot-auto.crontab2
-rw-r--r--roles/dnsserver/tasks/common.yml8
-rw-r--r--update.yml8
3 files changed, 14 insertions, 4 deletions
diff --git a/roles/dnsserver/files/reboot-auto.crontab b/roles/dnsserver/files/reboot-auto.crontab
deleted file mode 100644
index c7b6983..0000000
--- a/roles/dnsserver/files/reboot-auto.crontab
+++ /dev/null
@@ -1,2 +0,0 @@
-# Reboot du Dimanche
-40 4 * * 7 root systemctl reboot
diff --git a/roles/dnsserver/tasks/common.yml b/roles/dnsserver/tasks/common.yml
index e39db6b..667eea4 100644
--- a/roles/dnsserver/tasks/common.yml
+++ b/roles/dnsserver/tasks/common.yml
@@ -1,5 +1,9 @@
-- name: Reboot automatique
- copy: src=reboot-auto.crontab dest=/etc/cron.d/reboot-auto mode=644
+- name: Reboot automatique désactivé
+ file:
+ path: /etc/cron.d/reboot-auto
+ state: absent
+
+
- name: Configuration de sudo
copy: src=sudo
diff --git a/update.yml b/update.yml
index 742b882..31510d2 100644
--- a/update.yml
+++ b/update.yml
@@ -26,3 +26,11 @@
units: hours
unique: yes
tags: reboot
+
+ - name: rkhunter internal database update
+ at:
+ command: /usr/bin/rkhunter --propupd
+ count: 50
+ units: minutes
+ unique: yes
+ when: ansible_virtualization_role == "NA" or ansible_virtualization_role == "host"