Splited init and fetch
Signed-off-by: Radovan Sroka <rsroka@redhat.com>
This commit is contained in:
committed by
Sergei Petrosian
parent
7826ac05c6
commit
2b5660d4ce
+31
-6
@@ -29,7 +29,7 @@
|
||||
when:
|
||||
- aide_generate_config
|
||||
|
||||
- name: Initialize AIDE database and fetch it
|
||||
- name: Initialize AIDE database
|
||||
when:
|
||||
- aide_init
|
||||
block:
|
||||
@@ -38,6 +38,29 @@
|
||||
cmd: aide --init
|
||||
changed_when: true
|
||||
|
||||
- name: Copy AIDE reference database
|
||||
ansible.builtin.copy:
|
||||
remote_src: true
|
||||
src: "{{ __aide_db_new_name }}"
|
||||
dest: "{{ __aide_db_name }}"
|
||||
owner: root
|
||||
group: root
|
||||
mode: "0440"
|
||||
force: yes
|
||||
when:
|
||||
- not aide_fetch_db
|
||||
|
||||
- name: Remove remote AIDE database file
|
||||
ansible.builtin.file:
|
||||
path: "{{ __aide_db_new_name }}"
|
||||
state: absent
|
||||
when:
|
||||
- not aide_fetch_db
|
||||
|
||||
- name: Fetch AIDE database
|
||||
when:
|
||||
- aide_fetch_db
|
||||
block:
|
||||
- name: Fetch AIDE database
|
||||
ansible.builtin.fetch:
|
||||
src: "{{ __aide_db_new_name }}"
|
||||
@@ -52,15 +75,16 @@
|
||||
when:
|
||||
- aide_check
|
||||
block:
|
||||
- name: Copy AIDE reference database to remote
|
||||
- name: Copy AIDE reference database
|
||||
ansible.builtin.copy:
|
||||
src:
|
||||
"{{ aide_db_fetch_dir }}/{{ inventory_hostname }}/var/lib/aide/\
|
||||
aide.db.new.gz"
|
||||
src: "{{ aide_db_fetch_dir }}/{{ inventory_hostname }}\
|
||||
{{ __aide_db_new_name }}"
|
||||
dest: "{{ __aide_db_name }}"
|
||||
owner: root
|
||||
group: root
|
||||
mode: "0440"
|
||||
when:
|
||||
- aide_fetch_db
|
||||
|
||||
- name: Check against AIDE reference database
|
||||
ansible.builtin.command:
|
||||
@@ -75,7 +99,8 @@
|
||||
ansible.builtin.command:
|
||||
cmd: aide --update
|
||||
register: __aide_update_result
|
||||
failed_when: __aide_update_result.rc > 7
|
||||
failed_when: "'AIDE found NO differences between database and filesystem. Looks okay!!'\
|
||||
not in __aide_update_result.stdout"
|
||||
changed_when: true
|
||||
|
||||
- name: Fetch AIDE database
|
||||
|
||||
Reference in New Issue
Block a user