From 10552179ff35d5ecd22b9ca2b45d5576f2c87e85 Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Wed, 23 Dec 2015 17:24:34 +0000 Subject: [PATCH] Try this to also tell rkhunter to allow spice files on openqa worker hosts --- roles/rkhunter/templates/rkhunter.conf.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/rkhunter/templates/rkhunter.conf.j2 b/roles/rkhunter/templates/rkhunter.conf.j2 index d772bb4675..81f544f610 100644 --- a/roles/rkhunter/templates/rkhunter.conf.j2 +++ b/roles/rkhunter/templates/rkhunter.conf.j2 @@ -386,7 +386,7 @@ ALLOWDEVFILE=/dev/shm/fmn-cache.dbm ALLOWDEVFILE=/dev/shm/squid-squid-page-pool.shm ALLOWDEVFILE=/dev/shm/squid-cache_mem.shm {% endif %} -{% if ansible_fqdn in groups['virtservers'] %} +{% if ansible_fqdn in groups['virtservers','openqa-workers','openqa-stg-workers'] %} # libvirt spice device makes a /dev/shm/spice file ALLOWDEVFILE=/dev/shm/spice.* {% endif %}