Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Try and adjust rkhunter config for cloud nodes

Browse source
This commit is contained in:
Kevin Fenzi 2015-05-14 15:34:10 +00:00
parent 74b02ea284
commit 7aa6f8fd9a
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
roles/rkhunter/templates/rkhunter.conf.j2
View file

@ -200,7 +200,12 @@ ALLOW_SSH_PROT_V1=0
# tests, the test names, and how rkhunter behaves when these options are used.
#
ENABLE_TESTS="all"
{% if ansible_hostname.startswith('fed-cloud') %}
# Disable the promisc test here as openstack has it set on interfaces
DISABLE_TESTS="suspscan hidden_procs deleted_files packet_cap_apps apps promisc"
{% else %}
DISABLE_TESTS="suspscan hidden_procs deleted_files packet_cap_apps apps"
{% endif %}
#
# The HASH_FUNC option can be used to specify the command to use