Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Adjust rkhunter for changes on kojipkgs and fed-cloud09

Browse source 
On fed-cloud09 we have etckeeper, so allow it's hidden dirs in /etc
On kojipkgs we have some /dev/shm segments.
This commit is contained in:
Kevin Fenzi 2015-06-07 17:31:02 +00:00
parent 6993fc1dd1
commit 54819d417b
1 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
roles/rkhunter/templates/rkhunter.conf.j2
View file

@ -308,6 +308,9 @@ ALLOWHIDDENDIR=/dev/.udevdb
ALLOWHIDDENDIR=/dev/.udev.tdb
ALLOWHIDDENDIR=/dev/.udev/db
ALLOWHIDDENDIR=/dev/.udev/rules.d
{% if ansible_hostname.startswith('fed-cloud') %}
ALLOWHIDDENDIR=/etc/.git
{% endif %}
#
# Allow the specified hidden files.
@ -330,6 +333,10 @@ ALLOWHIDDENFILE=/dev/.udev/uevent_seqnum
# Fedora 21 and higher systems has a /dev/.updated file
ALLOWHIDDENFILE=/etc/.updated
{% endif %}
{% if ansible_hostname.startswith('fed-cloud') %}
ALLOWHIDDENFILE=/etc/.etckeeper
ALLOWHIDDENFILE=/etc/.gitignore
{% endif %}
#
# Allow the specified processes to use deleted files.
@ -377,6 +384,10 @@ ALLOWDEVFILE=/dev/md/autorebuild.pid
{% if ansible_hostname == 'notifs-backend01' %}
ALLOWDEVFILE=/dev/shm/fmn-cache.dbm
{% endif %}
{% if ansible_hostname.startswith('kojipkgs') %}
ALLOWDEVFILE=/dev/shm/squid-squid-page-pool.shm
ALLOWDEVFILE=/dev/shm/squid-cache_mem.shm
{% endif %}
#
# This setting tells rkhunter where the inetd configuration