me/env-ansible
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Create new variable for lynis executable.

Browse Source
This commit is contained in:
Hyperling
2021-01-31 13:40:06 -06:00
parent 9313d1a7ed
commit 4cd52e5405
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
facts/filesystem_names.yml
View File

@@ -5,6 +5,7 @@
ansible.builtin.set_fact: ansible.builtin.set_fact:
lynis_install_dir: /usr/local/lynis lynis_install_dir: /usr/local/lynis
lynis_report: /home/ling/lynis.log lynis_report: /home/ling/lynis.log
lynis_exec: /usr/local/lynis/lynis
sudoers_install_dir: /etc/sudoers.d/ansible sudoers_install_dir: /etc/sudoers.d/ansible
when: ansible_distribution == "Pop!_OS" when: ansible_distribution == "Pop!_OS"
@@ -14,6 +15,7 @@
ansible.builtin.set_fact: ansible.builtin.set_fact:
lynis_install_dir: /usr/local/lynis lynis_install_dir: /usr/local/lynis
lynis_report: /root/lynis.log lynis_report: /root/lynis.log
lynis_exec: /usr/local/lynis/lynis
sudoers_install_dir: /etc/sudoers.d/ansible sudoers_install_dir: /etc/sudoers.d/ansible
when: ansible_distribution == "Ubuntu" when: ansible_distribution == "Ubuntu"
@@ -23,5 +25,6 @@
ansible.builtin.set_fact: ansible.builtin.set_fact:
lynis_install_dir: /usr/local/lynis lynis_install_dir: /usr/local/lynis
lynis_report: /root/lynis.log lynis_report: /root/lynis.log
lynis_exec: /usr/local/lynis/lynis
sudoers_install_dir: /usr/local/etc/sudoers.d/ansible sudoers_install_dir: /usr/local/etc/sudoers.d/ansible
when: ansible_distribution == "FreeBSD" when: ansible_distribution == "FreeBSD"

2
tasks/hardness_check_lynis.yml
View File

@@ -6,7 +6,7 @@
force: yes force: yes
- name: Run Lynis Audit System - name: Run Lynis Audit System
shell: "{{ lynis_install_dir }}"/lynis --no-colors audit system > "{{ lynis_report }}" 2>&1 shell: "{{ lynis_exec }}" --no-colors audit system > "{{ lynis_report }}" 2>&1
- name: Make Lynis Report Readable - name: Make Lynis Report Readable
shell: chmod 444 "{{ lynis_report }}" shell: chmod 444 "{{ lynis_report }}"