43 lines
854 B
YAML
43 lines
854 B
YAML
---
|
|
- name: Install aide
|
|
yum:
|
|
name: aide
|
|
|
|
- name: Remove all the current ignore list in aide.conf
|
|
lineinfile:
|
|
dest: /etc/aide.conf
|
|
backup: yes
|
|
regexp: "^#!|!/"
|
|
state: absent
|
|
|
|
- name: change up aide.conf to standards set in aide_ignore_list var
|
|
lineinfile:
|
|
dest: /etc/aide.conf
|
|
line: "@@include /etc/aide.conf.local"
|
|
insertafter: EOF
|
|
state: present
|
|
|
|
- name: copy aide.conf.local
|
|
copy:
|
|
src: aide.conf.local
|
|
dest: /etc/aide.conf.local
|
|
mode: '0600'
|
|
|
|
- name: copy aide-update script
|
|
copy:
|
|
src: aide-update
|
|
dest: /usr/local/bin/aide-update
|
|
mode: '0755'
|
|
|
|
- name: Add crontab to check aide nightly
|
|
cron:
|
|
cron_file: aide_check
|
|
user: root
|
|
name: "Check Aide DB nightly"
|
|
hour: "23"
|
|
minute: "45"
|
|
job: "/usr/sbin/aide --check"
|
|
|
|
notify:
|
|
- update aide database
|