summaryrefslogtreecommitdiffstats
path: root/roles/common
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2017-06-21 15:42:48 +0200
committerGuilhem Moulin <guilhem@fripost.org>2017-06-26 13:01:25 +0200
commitd0294df197362ee61a65f0b5931b4e760c1efc2c (patch)
tree9b5797065c90d6b4e1607540368ff6eb2a893221 /roles/common
parent964d5a81ebd010c6f2c42b9c106e1a9652804b30 (diff)
Don't install debsecan anymore by default.
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=789196
Diffstat (limited to 'roles/common')
-rw-r--r--roles/common/tasks/apt.yml7
-rw-r--r--roles/common/templates/etc/default/debsecan.j217
2 files changed, 0 insertions, 24 deletions
diff --git a/roles/common/tasks/apt.yml b/roles/common/tasks/apt.yml
index f444315..2f5a62a 100644
--- a/roles/common/tasks/apt.yml
+++ b/roles/common/tasks/apt.yml
@@ -10,7 +10,6 @@
- unattended-upgrades
- debfoster
- deborphan
- - debsecan
- debsums
- name: Configure APT (1)
@@ -34,12 +33,6 @@
- apt.conf.d/10periodic
- apt.conf.d/50unattended-upgrades
-- name: Configure the Debian Security Analyzer
- template: src=etc/default/debsecan.j2
- dest=/etc/default/debsecan
- owner=root group=root
- mode=0644
-
- name: Start cron
service: name=cron state=started
tags:
diff --git a/roles/common/templates/etc/default/debsecan.j2 b/roles/common/templates/etc/default/debsecan.j2
deleted file mode 100644
index 71fee1c..0000000
--- a/roles/common/templates/etc/default/debsecan.j2
+++ /dev/null
@@ -1,17 +0,0 @@
-# Configuration file for debsecan. Contents of this file should
-# adhere to the KEY=VALUE shell syntax. This file may be edited by
-# debsecan's scripts, but your modifications are preserved.
-
-# If true, enable daily reports, sent by email.
-REPORT=true
-
-# For better reporting, specify the correct suite here, using the code
-# name (that is, "sid" instead of "unstable").
-SUITE={{ ansible_lsb.codename }}
-
-# Mail address to which reports are sent.
-MAILTO=admin@fripost.org
-
-# The URL from which vulnerability data is downloaded. Empty for the
-# built-in default.
-SOURCE=