summaryrefslogtreecommitdiffstats
path: root/roles/common/tasks/rkhunter.yml
diff options
context:
space:
mode:
authorMatthieu Saulnier <fantom@fedoraproject.org>2014-07-20 09:31:19 +0200
committerMatthieu Saulnier <fantom@fedoraproject.org>2014-07-20 09:31:19 +0200
commit95087563a181a0b5352f2a8dc525f7428fd12383 (patch)
tree4c3818d5d4e21611864f9331409129747763f94f /roles/common/tasks/rkhunter.yml
parent303e33e58e3fd971b837294d141e92717ddde8da (diff)
downloadplaybooks-ansible-95087563a181a0b5352f2a8dc525f7428fd12383.tar.gz
playbooks-ansible-95087563a181a0b5352f2a8dc525f7428fd12383.tar.xz
playbooks-ansible-95087563a181a0b5352f2a8dc525f7428fd12383.zip
Add hosts file configuration
Add rkhunter on physical hosts Add cron file for weekly uptime report Rename cron file for HIDS AIDE Group tasks for AIDE in one task file
Diffstat (limited to 'roles/common/tasks/rkhunter.yml')
-rw-r--r--roles/common/tasks/rkhunter.yml7
1 files changed, 7 insertions, 0 deletions
diff --git a/roles/common/tasks/rkhunter.yml b/roles/common/tasks/rkhunter.yml
new file mode 100644
index 0000000..fbaddeb
--- /dev/null
+++ b/roles/common/tasks/rkhunter.yml
@@ -0,0 +1,7 @@
+- name: Installation de rkhunter
+ yum: name=rkhunter state=present
+
+- name: Activation de tests rkhunter
+ lineinfile: dest=/etc/rkhunter.conf state=present backrefs=yes
+ regexp="^DISABLE_TESTS=suspscan hidden_ports deleted_files packet_cap_apps apps"
+ line="DISABLE_TESTS=suspscan deleted_files hidden_procs"