summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2014-07-14 03:04:45 +0200
committerGuilhem Moulin <guilhem@fripost.org>2015-06-07 02:53:08 +0200
commit9516d25e869b5f704297442a9b28751081410f55 (patch)
treec7e6b5ff0eb764891f41eecc82843da99b224a8e
parent9ac2057bb6f1465b8392f18552ac1df17f6d81d6 (diff)
Install auditd.
-rw-r--r--roles/common/tasks/auditd.yml7
-rw-r--r--roles/common/tasks/main.yml1
-rw-r--r--roles/common/tasks/samhain.yml5
3 files changed, 9 insertions, 4 deletions
diff --git a/roles/common/tasks/auditd.yml b/roles/common/tasks/auditd.yml
new file mode 100644
index 0000000..05bd447
--- /dev/null
+++ b/roles/common/tasks/auditd.yml
@@ -0,0 +1,7 @@
+- name: Install auditd
+ apt: pkg=auditd
+
+- name: Start auditd
+ service: name=auditd state=started
+
+- meta: flush_handlers
diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
index a239667..903e834 100644
--- a/roles/common/tasks/main.yml
+++ b/roles/common/tasks/main.yml
@@ -4,6 +4,7 @@
- include: apt.yml tags=apt
- include: firewall.yml tags=firewall,iptables
- include: samhain.yml tags=samhain
+- include: auditd.yml tags=auditd
- include: rkhunter.yml tags=rkhunter
- include: clamav.yml tags=clamav
- include: fail2ban.yml tags=fail2ban
diff --git a/roles/common/tasks/samhain.yml b/roles/common/tasks/samhain.yml
index 184decc..dd5c09b 100644
--- a/roles/common/tasks/samhain.yml
+++ b/roles/common/tasks/samhain.yml
@@ -1,8 +1,5 @@
- name: Install samhain
- apt: pkg={{ item }}
- with_items:
- - samhain
- - auditd
+ apt: pkg=samhain
# XXX: Doesn't work out of the box, see #660197.
# Every once in a while, or after a major upgrade, you may want to
# update Samhain's database: