File tree Expand file tree Collapse file tree 2 files changed +3
-49
lines changed
inventory/group_vars/cis-hardening Expand file tree Collapse file tree 2 files changed +3
-49
lines changed Original file line number Diff line number Diff line change 11---
2- - name : CIS - Ensure existing AIDE installation is cleaned
3- hosts : cis-hardening
4- become : true
5- tags :
6- - cis
7- gather_facts : true
8- tasks :
9- - name : Gather package facts
10- ansible.builtin.package_facts :
11- manager : auto
12-
13- - name : Check if AIDE cleanup has already run
14- ansible.builtin.stat :
15- path : /opt/kayobe/aide/aide_cleanup_complete.flag
16- register : aide_cleanup_flag
17-
18- - name : Cleanup existing AIDE config
19- when :
20- - " 'aide' in ansible_facts.packages"
21- - not aide_cleanup_flag.stat.exists
22- - ansible_facts.distribution == 'Ubuntu'
23- block :
24- - name : Ensure AIDE packages is removed
25- ansible.builtin.apt :
26- name :
27- - aide
28- - aide-common
29- state : absent
30- purge : true
31-
32- - name : Ensure flag directory exists
33- ansible.builtin.file :
34- path : /opt/kayobe/aide
35- state : directory
36- mode : ' 0755'
37- owner : stack
38- group : stack
39-
40- - name : Create flag file to prevent re-running cleanup
41- ansible.builtin.file :
42- path : /opt/kayobe/aide/aide_cleanup_complete.flag
43- state : touch
44- mode : ' 0644'
45- owner : stack
46- group : stack
47-
48- - name : CIS - General Prerequisites
2+ - name : CIS - Prerequisites
493 hosts : cis-hardening
504 become : true
515 tags :
Original file line number Diff line number Diff line change @@ -98,8 +98,8 @@ ubtu24cis_syslog_service: journald
9898# Allow rsync server
9999ubtu24cis_rsync_server: true
100100
101- # AIDE is very slow to init, especially on an AIO in CI
102- ubtu24cis_aide_init_async: 1800
101+ # AIDE doesn't play well with hosts that have been upgraded from Jammy to Noble
102+ ubtu24cis_config_aide: false
103103
104104# Do not change Chrony Time servers
105105ubtu24cis_rule_2_3_3_1: false
You can’t perform that action at this time.
0 commit comments