From d72d516f2647a3e03b5e11d891c6ec4e9ddcf9cf Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Thu, 13 Mar 2014 16:43:50 +0100 Subject: Make use of Ansible 1.5 new features. Most notably pipelining=True and sysctl_set=yes. --- roles/common/tasks/logging.yml | 1 + roles/common/tasks/rkhunter.yml | 2 ++ roles/common/tasks/sysctl.yml | 2 +- 3 files changed, 4 insertions(+), 1 deletion(-) (limited to 'roles/common/tasks') diff --git a/roles/common/tasks/logging.yml b/roles/common/tasks/logging.yml index 06f06b0..d25a75e 100644 --- a/roles/common/tasks/logging.yml +++ b/roles/common/tasks/logging.yml @@ -20,6 +20,7 @@ with_items: - logcheck.conf - ignore.d.server/common.local + - violations.ignore.d/logcheck-sudo - name: Minimal logging policy (1) lineinfile: dest=/etc/logrotate.d/rsyslog diff --git a/roles/common/tasks/rkhunter.yml b/roles/common/tasks/rkhunter.yml index f6a4d71..78eec90 100644 --- a/roles/common/tasks/rkhunter.yml +++ b/roles/common/tasks/rkhunter.yml @@ -8,6 +8,8 @@ - unhide - unhide.rb +# To test the configuration: +# ansible all -m command -a '/usr/bin/rkhunter -c --nomow --rwo' - name: Configure rkhunter copy: src=etc/{{ item }} dest=/etc/{{ item }} diff --git a/roles/common/tasks/sysctl.yml b/roles/common/tasks/sysctl.yml index 9adeece..6ac7feb 100644 --- a/roles/common/tasks/sysctl.yml +++ b/roles/common/tasks/sysctl.yml @@ -1,4 +1,4 @@ -- sysctl: name={{ item.name }} value={{ item.value }} +- sysctl: name={{ item.name }} "value={{ item.value }}" sysctl_set=yes with_items: - { name: 'kernel.domainname', value: '{{ ansible_domain }}' } -- cgit v1.2.3