me/env-ansible
me/env-ansible
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix quotes so that I can remove lynis_exec variable.

Browse Source
This commit is contained in:
Hyperling 2021-01-31 13:50:27 -06:00
parent 63e848210c
commit a53ec10a99
2 changed files with 1 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
facts/filesystem_names.yml
View File

@ -5,7 +5,6 @@
ansible.builtin.set_fact: ansible.builtin.set_fact:
lynis_install_dir: /usr/local/lynis lynis_install_dir: /usr/local/lynis
lynis_report: /home/ling/lynis.log lynis_report: /home/ling/lynis.log
lynis_exec: /usr/local/lynis/lynis
sudoers_install_dir: /etc/sudoers.d/ansible sudoers_install_dir: /etc/sudoers.d/ansible
when: ansible_distribution == "Pop!_OS" when: ansible_distribution == "Pop!_OS"
@ -15,7 +14,6 @@
ansible.builtin.set_fact: ansible.builtin.set_fact:
lynis_install_dir: /usr/local/lynis lynis_install_dir: /usr/local/lynis
lynis_report: /root/lynis.log lynis_report: /root/lynis.log
lynis_exec: /usr/local/lynis/lynis
sudoers_install_dir: /etc/sudoers.d/ansible sudoers_install_dir: /etc/sudoers.d/ansible
when: ansible_distribution == "Ubuntu" when: ansible_distribution == "Ubuntu"
@ -24,6 +22,5 @@
ansible.builtin.set_fact: ansible.builtin.set_fact:
lynis_install_dir: /usr/local/lynis lynis_install_dir: /usr/local/lynis
lynis_report: /root/lynis.log lynis_report: /root/lynis.log
lynis_exec: /usr/local/lynis/lynis
sudoers_install_dir: /usr/local/etc/sudoers.d/ansible sudoers_install_dir: /usr/local/etc/sudoers.d/ansible
when: ansible_distribution == "FreeBSD" when: ansible_distribution == "FreeBSD"

2
tasks/hardness_check_lynis.yml
View File

@ -6,7 +6,7 @@
force: yes force: yes
- name: Run Lynis Audit System - name: Run Lynis Audit System
shell: "{{ lynis_exec }}" --no-colors audit system > "{{ lynis_report }}" 2>&1 shell: "{{ lynis_install_dir }}/lynis --no-colors audit system > {{ lynis_report }} 2>&1"
- name: Make Lynis Report Readable - name: Make Lynis Report Readable
shell: chmod 444 "{{ lynis_report }}" shell: chmod 444 "{{ lynis_report }}"