summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--roles/common/tasks/auditd.yml7
-rw-r--r--roles/common/tasks/main.yml1
-rw-r--r--roles/common/tasks/samhain.yml5
3 files changed, 9 insertions, 4 deletions
diff --git a/roles/common/tasks/auditd.yml b/roles/common/tasks/auditd.yml
new file mode 100644
index 0000000..05bd447
--- /dev/null
+++ b/roles/common/tasks/auditd.yml
@@ -0,0 +1,7 @@
+- name: Install auditd
+ apt: pkg=auditd
+
+- name: Start auditd
+ service: name=auditd state=started
+
+- meta: flush_handlers
diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
index a239667..903e834 100644
--- a/roles/common/tasks/main.yml
+++ b/roles/common/tasks/main.yml
@@ -4,6 +4,7 @@
- include: apt.yml tags=apt
- include: firewall.yml tags=firewall,iptables
- include: samhain.yml tags=samhain
+- include: auditd.yml tags=auditd
- include: rkhunter.yml tags=rkhunter
- include: clamav.yml tags=clamav
- include: fail2ban.yml tags=fail2ban
diff --git a/roles/common/tasks/samhain.yml b/roles/common/tasks/samhain.yml
index 184decc..dd5c09b 100644
--- a/roles/common/tasks/samhain.yml
+++ b/roles/common/tasks/samhain.yml
@@ -1,8 +1,5 @@
- name: Install samhain
- apt: pkg={{ item }}
- with_items:
- - samhain
- - auditd
+ apt: pkg=samhain
# XXX: Doesn't work out of the box, see #660197.
# Every once in a while, or after a major upgrade, you may want to
# update Samhain's database: