summaryrefslogtreecommitdiffstats
path: root/roles/common/tasks/samhain.yml
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2014-06-25 02:43:06 +0200
committerGuilhem Moulin <guilhem@fripost.org>2015-06-07 02:51:48 +0200
commitd6b03b72e8081c983822502e436ec548aa36901e (patch)
tree6548fd4649f32a2ad37346c318c3b32060fae162 /roles/common/tasks/samhain.yml
parent2a2333cdfb016bb884887f46fbcbfdce6e064d74 (diff)
wibble
Diffstat (limited to 'roles/common/tasks/samhain.yml')
-rw-r--r--roles/common/tasks/samhain.yml7
1 files changed, 5 insertions, 2 deletions
diff --git a/roles/common/tasks/samhain.yml b/roles/common/tasks/samhain.yml
index 0d911a5..10b1f46 100644
--- a/roles/common/tasks/samhain.yml
+++ b/roles/common/tasks/samhain.yml
@@ -1,26 +1,29 @@
- name: Install samhain
apt: pkg={{ item }}
with_items:
- samhain
- auditd
# XXX: Doesn't work out of the box, see #660197.
# Every once in a while, or after a major upgrade, you may want to
- # update Samhain's database (to avoid being flooded at the next
- # reboot):
+ # update Samhain's database:
+ #
+ # sudo samhain -t update --foreground
+ #
+ # To update the database without sending mails:
#
# sudo samhain -t update --foreground -m none
- name: Configure samhain
copy: src=etc/samhain/samhainrc
dest=/etc/samhain/samhainrc
owner=root group=root
mode=0644
notify:
- Reload samhain
- name: Start samhain
# This task is inconditional because samhain is reloaded not
# restarted.
service: name=samhain state=started
- meta: flush_handlers