env-ansible/tasks/general/tests/lynis.yml

---
# Lynis hardness check.

- name: General | Tests | Lynis | Install
  git: 
    repo: https://github.com/CISOfy/lynis
    dest: "{{ lynis_install_dir }}"
    clone: yes
    force: yes

- name: General | Tests | Lynis | Run System Audit
  shell: "{{ lynis_install_dir }}/lynis --no-colors audit system > {{ lynis_report }} 2>&1"

- name: General | Tests | Lynis | Make Report Readable
  file:
    path: "{{ lynis_report }}"
    mode: '0444'
Removing TODOs and fixing some consistency errors. 2021-01-31 17:21:39 -06:00			`---`
General FreeBSD and account improvements. 2021-02-03 21:17:48 -06:00			`# Lynis hardness check.`
Removing TODOs and fixing some consistency errors. 2021-01-31 17:21:39 -06:00
Better names. :) 2021-02-02 21:28:17 -06:00			`- name: General \| Tests \| Lynis \| Install`
Remove more FQCN's for Debian. 2021-01-31 17:17:14 -06:00			`git:`
End script with a Lynis hardness check. 2020-12-28 20:57:05 -06:00			`repo: https://github.com/CISOfy/lynis`
Debug looks terrible. Put it in a file and hope that the color codes are ignored. 2020-12-28 21:32:28 -06:00			`dest: "{{ lynis_install_dir }}"`
End script with a Lynis hardness check. 2020-12-28 20:57:05 -06:00			`clone: yes`
			`force: yes`

Better names. :) 2021-02-02 21:28:17 -06:00			`- name: General \| Tests \| Lynis \| Run System Audit`
Fix quotes so that I can remove lynis_exec variable. 2021-01-31 13:50:27 -06:00			`shell: "{{ lynis_install_dir }}/lynis --no-colors audit system > {{ lynis_report }} 2>&1"`
I guess command and shell hate having an FQCN. Now need to output the results. 2020-12-28 21:19:01 -06:00
Better names. :) 2021-02-02 21:28:17 -06:00			`- name: General \| Tests \| Lynis \| Make Report Readable`
Remove more FQCN's for Debian. 2021-01-31 17:17:14 -06:00			`file:`
Change shell chmod to file module. 2021-01-31 13:55:18 -06:00			`path: "{{ lynis_report }}"`
			`mode: '0444'`