forked from ansible-lockdown/RHEL9-CIS
Added further aide variable
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
a3f8d4fe1f
commit
bab28dda45
2 changed files with 8 additions and 8 deletions
|
|
@ -11,14 +11,10 @@
|
|||
- patch
|
||||
- rule_6.1.1
|
||||
- NIST800-53R5_AU-2
|
||||
block:
|
||||
block:
|
||||
- name: "6.1.1 | PATCH | Ensure AIDE is installed"
|
||||
when:
|
||||
- "'aide' not in ansible_facts.packages or
|
||||
'aide-common' not in ansible_facts.packages"
|
||||
ansible.builtin.package:
|
||||
name: ['aide', 'aide-common']
|
||||
name: "{{ aide_packages }}"
|
||||
state: present
|
||||
update_cache: true
|
||||
register: discovered_aide_pkg_added
|
||||
|
|
|
|||
|
|
@ -45,8 +45,12 @@ container_vars_file: is_container.yml
|
|||
# system_is_ec2 toggle will disable tasks that fail on Amazon EC2 instances. Set true to skip and false to run tasks
|
||||
system_is_ec2: false
|
||||
|
||||
# Aide Packages
|
||||
|
||||
aide_packages:
|
||||
- aide
|
||||
# Aide initiate command for new DB creation
|
||||
aide_initiate_command: aideinit -y -f
|
||||
aide_initiate_command: /usr/sbin/aide --init
|
||||
|
||||
# Audit vars
|
||||
audit_bins:
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue