diff options
| -rw-r--r-- | roles/common/tasks/auditd.yml | 7 | ||||
| -rw-r--r-- | roles/common/tasks/main.yml | 1 | ||||
| -rw-r--r-- | roles/common/tasks/samhain.yml | 5 |
3 files changed, 9 insertions, 4 deletions
diff --git a/roles/common/tasks/auditd.yml b/roles/common/tasks/auditd.yml new file mode 100644 index 0000000..05bd447 --- /dev/null +++ b/roles/common/tasks/auditd.yml @@ -0,0 +1,7 @@ +- name: Install auditd + apt: pkg=auditd + +- name: Start auditd + service: name=auditd state=started + +- meta: flush_handlers diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml index a239667..903e834 100644 --- a/roles/common/tasks/main.yml +++ b/roles/common/tasks/main.yml @@ -4,6 +4,7 @@ - include: apt.yml tags=apt - include: firewall.yml tags=firewall,iptables - include: samhain.yml tags=samhain +- include: auditd.yml tags=auditd - include: rkhunter.yml tags=rkhunter - include: clamav.yml tags=clamav - include: fail2ban.yml tags=fail2ban diff --git a/roles/common/tasks/samhain.yml b/roles/common/tasks/samhain.yml index 184decc..dd5c09b 100644 --- a/roles/common/tasks/samhain.yml +++ b/roles/common/tasks/samhain.yml @@ -1,8 +1,5 @@ - name: Install samhain - apt: pkg={{ item }} - with_items: - - samhain - - auditd + apt: pkg=samhain # XXX: Doesn't work out of the box, see #660197. # Every once in a while, or after a major upgrade, you may want to # update Samhain's database: |