From 6059906447f42ff48a572998361cc2d225c5c512 Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Sat, 21 Dec 2013 16:45:19 +0000 Subject: [PATCH] Fix rkhunter template for arm-qa machines that has been wrong for a long time. --- roles/rkhunter/templates/rkhunter.conf.j2 | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/roles/rkhunter/templates/rkhunter.conf.j2 b/roles/rkhunter/templates/rkhunter.conf.j2 index 705517580d..52cb350c0a 100644 --- a/roles/rkhunter/templates/rkhunter.conf.j2 +++ b/roles/rkhunter/templates/rkhunter.conf.j2 @@ -165,7 +165,13 @@ ALLOW_SSH_ROOT_USER=without-password # configuration file, then a value of '2' may be set here in order to # suppress a warning message. This option has a default value of '0'. # +{% if ansible_distribution == 'Fedora' %} +# Fedora doesn't set protocol in ssh config +ALLOW_SSH_PROT_V1=2 +{% else %} +# RHEL sets proto to v2 only ALLOW_SSH_PROT_V1=0 +{% endif %} # # This setting tells rkhunter the directory containing the SSH configuration