Initial commit

ansible/roles/aide/files/aide-update

@@ -0,0 +1,4 @@
+#!/bin/bash
+/usr/sbin/aide -c /etc/aide.conf --init
+/bin/cp /var/lib/aide/aide.db.new.gz /var/lib/aide/aide.db.gz
+

ansible/roles/aide/files/aide.conf.local

@@ -0,0 +1 @@
+!/root/.ansible/tmp

ansible/roles/aide/handlers/main.yml

@@ -0,0 +1,3 @@
+---
+- name: update aide database
+  action: command /usr/local/bin/aide-update

ansible/roles/aide/tasks/main.yml

@@ -0,0 +1,42 @@
+---  
+- name: Install aide
+  yum: 
+    name: aide
+
+- name: Remove all the current ignore list in aide.conf
+  lineinfile:
+    dest: /etc/aide.conf
+    backup: yes
+    regexp: "^#!|!/"
+    state: absent 
+
+- name: change up aide.conf to standards set in aide_ignore_list var
+  lineinfile:
+    dest: /etc/aide.conf
+    line: "@@include /etc/aide.conf.local"
+    insertafter: EOF
+    state: present
+
+- name: copy aide.conf.local
+  copy:
+    src: aide.conf.local
+    dest: /etc/aide.conf.local
+    mode: '0600'
+
+- name: copy aide-update script
+  copy:
+    src: aide-update
+    dest: /usr/local/bin/aide-update
+    mode: '0755'
+
+- name:  Add crontab to check aide nightly
+  cron:
+    cron_file: aide_check
+    user: root
+    name: "Check Aide DB nightly"
+    hour: "23"
+    minute: "45"
+    job: "/usr/sbin/aide --check" 
+
+  notify: 
+    - update aide database