End script with a Lynis hardness check.

2020-12-28 20:57:05 -06:00
parent 46c252757e
commit 15a9bd392f
2 changed files with 19 additions and 1 deletions
--- a/tasks/hardness_check_lynis.yml
+++ b/tasks/hardness_check_lynis.yml
@ -0,0 +1,11 @@
+- name: Install Lynis
+  ansible.builtin.git: 
+    repo: https://github.com/CISOfy/lynis
+    dest: /usr/local/
+    clone: yes
+    force: yes
+
+- name: Run Lynis
+  ansible.builtin.shell:
+    chdir: /usr/local/lynis/
+    cmd: lynis audit system