Initial

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>

tasks/section_1/cis_1.4.x.yml

@@ -0,0 +1,50 @@
+---
+
+- name: "1.4.1 | L1 | PATCH | Ensure AIDE is installed"
+  block:
+      - name: "1.4.1 | L1 | PATCH | Ensure AIDE is installed | Install AIDE"
+        package:
+            name: aide
+            state: present
+
+      - name: "1.4.1 | L1 | PATCH | Ensure AIDE is installed | Configure AIDE"
+        command: /usr/sbin/aide --init -B 'database_out=file:/var/lib/aide/aide.db.gz'
+        changed_when: false
+        failed_when: false
+        async: 45
+        poll: 0
+        args:
+            creates: /var/lib/aide/aide.db.gz
+        when: not ansible_check_mode
+  when:
+      - rhel9cis_config_aide
+      - rhel9cis_rule_1_4_1
+  tags:
+      - level1-server
+      - level1-workstation
+      - scored
+      - aide
+      - patch
+      - rule_1.4.1
+
+- name: "1.4.2 | L1 | PATCH | Ensure filesystem integrity is regularly checked"
+  cron:
+      name: Run AIDE integrity check
+      cron_file: "{{ rhel9cis_aide_cron['cron_file'] }}"
+      user: "{{ rhel9cis_aide_cron['cron_user'] }}"
+      minute: "{{ rhel9cis_aide_cron['aide_minute'] | default('0') }}"
+      hour: "{{ rhel9cis_aide_cron['aide_hour'] | default('5') }}"
+      day: "{{ rhel9cis_aide_cron['aide_day'] | default('*') }}"
+      month: "{{ rhel9cis_aide_cron['aide_month'] | default('*') }}"
+      weekday: "{{ rhel9cis_aide_cron['aide_weekday'] | default('*') }}"
+      job: "{{ rhel9cis_aide_cron['aide_job'] }}"
+  when:
+      - rhel9cis_rule_1_4_2
+  tags:
+      - level1-server
+      - level1-workstation
+      - scored
+      - aide
+      - file_integrity
+      - patch
+      - rule_1.4.2