env-ansible/tasks/general/tests/lynis.yml

---
# Lynis hardness check.

- name: General | Tests | Lynis | Install
  git: 
    repo: https://github.com/CISOfy/lynis
    dest: "{{ lynis_install_dir }}"
    clone: yes
    force: yes

- name: General | Tests | Lynis | Fix Permissions (Looking at you Parrot OS!)
  shell: "chown -R root:root {{ lynis_install_dir }}"

- name: General | Tests | Lynis | Run System Audit
  shell: "{{ lynis_install_dir }}/lynis audit system --no-colors > {{ lynis_report }} 2>&1"
  args:
    executable: "{{ bash_exec.stdout }}"

- name: General | Tests | Lynis | Make Report Readable
  file:
    path: "{{ lynis_report }}"
    mode: '0777'