diff --git a/defaults/main.yml b/defaults/main.yml index 1729119..8af69a3 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -15,6 +15,9 @@ aide_init: false # Fetch db aide_fetch_db: false +# Upload db +aide_upload_db: false + # Enable check database phase aide_check: false diff --git a/tasks/main.yml b/tasks/main.yml index 3d4bb7e..cc539bb 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -103,7 +103,7 @@ owner: root group: root mode: "0440" - when: aide_fetch_db | bool + when: aide_upload_db | bool - name: Check against AIDE reference database ansible.builtin.command: @@ -153,6 +153,14 @@ - aide_cron_check is not none - not aide_cron_check | bool + - name: Fetch AIDE logs + ansible.builtin.fetch: + src: "/var/log/aide/aide.log" + dest: "{{ aide_db_fetch_dir }}" + owner: root + group: root + mode: "0640" + - name: Record role success fingerprint sr_fingerprint: sr_message: >-