committed by
Sergei Petrosian
parent
1409ace70d
commit
19d326275e
@@ -13,8 +13,6 @@ This is an ansible role that installs and configures the [Advanced Intrusion Det
|
|||||||
* It runs AIDE integrity checks on the remote nodes
|
* It runs AIDE integrity checks on the remote nodes
|
||||||
* It updates the AIDE databases and stores them on the controller node
|
* It updates the AIDE databases and stores them on the controller node
|
||||||
|
|
||||||
### Available tags to control and use the role
|
|
||||||
|
|
||||||
## What does this role not do for you?
|
## What does this role not do for you?
|
||||||
|
|
||||||
* It does not explain how to create a good AIDE configuration that suits your requirements; that task remains for you to accomplish
|
* It does not explain how to create a good AIDE configuration that suits your requirements; that task remains for you to accomplish
|
||||||
|
|||||||
+8
-18
@@ -23,17 +23,13 @@
|
|||||||
src: "{{ aide_db_template }}"
|
src: "{{ aide_db_template }}"
|
||||||
dest: "/etc/{{ __aide_config }}"
|
dest: "/etc/{{ __aide_config }}"
|
||||||
mode: "0400"
|
mode: "0400"
|
||||||
when:
|
when: aide_db_template is not none
|
||||||
- aide_db_template is defined
|
|
||||||
- aide_db_template is not none
|
|
||||||
- aide_db_template is string
|
|
||||||
|
|
||||||
# - name: Print Header
|
# - name: Print Header
|
||||||
# ansible.builtin.shell: head /etc/aide.conf || true
|
# ansible.builtin.shell: head /etc/aide.conf || true
|
||||||
|
|
||||||
- name: Initialize AIDE database
|
- name: Initialize AIDE database
|
||||||
when:
|
when: aide_init | bool
|
||||||
- aide_init | bool
|
|
||||||
block:
|
block:
|
||||||
- name: Initialize AIDE database
|
- name: Initialize AIDE database
|
||||||
ansible.builtin.command:
|
ansible.builtin.command:
|
||||||
@@ -49,19 +45,16 @@
|
|||||||
group: root
|
group: root
|
||||||
mode: "0440"
|
mode: "0440"
|
||||||
force: true
|
force: true
|
||||||
when:
|
when: not aide_fetch_db | bool
|
||||||
- not aide_fetch_db | bool
|
|
||||||
|
|
||||||
- name: Remove remote AIDE database file
|
- name: Remove remote AIDE database file
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
path: "{{ __aide_db_new_name }}"
|
path: "{{ __aide_db_new_name }}"
|
||||||
state: absent
|
state: absent
|
||||||
when:
|
when: not aide_fetch_db | bool
|
||||||
- not aide_fetch_db | bool
|
|
||||||
|
|
||||||
- name: Fetch AIDE database
|
- name: Fetch AIDE database
|
||||||
when:
|
when: aide_fetch_db | bool
|
||||||
- aide_fetch_db | bool
|
|
||||||
block:
|
block:
|
||||||
- name: Fetch AIDE database
|
- name: Fetch AIDE database
|
||||||
ansible.builtin.fetch:
|
ansible.builtin.fetch:
|
||||||
@@ -74,8 +67,7 @@
|
|||||||
state: absent
|
state: absent
|
||||||
|
|
||||||
- name: Check AIDE integrity
|
- name: Check AIDE integrity
|
||||||
when:
|
when: aide_check | bool
|
||||||
- aide_check | bool
|
|
||||||
block:
|
block:
|
||||||
- name: Copy AIDE reference database
|
- name: Copy AIDE reference database
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
@@ -85,8 +77,7 @@
|
|||||||
owner: root
|
owner: root
|
||||||
group: root
|
group: root
|
||||||
mode: "0440"
|
mode: "0440"
|
||||||
when:
|
when: aide_fetch_db | bool
|
||||||
- aide_fetch_db | bool
|
|
||||||
|
|
||||||
- name: Check against AIDE reference database
|
- name: Check against AIDE reference database
|
||||||
ansible.builtin.command:
|
ansible.builtin.command:
|
||||||
@@ -94,8 +85,7 @@
|
|||||||
changed_when: true
|
changed_when: true
|
||||||
|
|
||||||
- name: Update AIDE database and fetch it
|
- name: Update AIDE database and fetch it
|
||||||
when:
|
when: aide_update | bool
|
||||||
- aide_update | bool
|
|
||||||
block:
|
block:
|
||||||
- name: Update AIDE database
|
- name: Update AIDE database
|
||||||
ansible.builtin.command:
|
ansible.builtin.command:
|
||||||
|
|||||||
Reference in New Issue
Block a user