diff --git a/roles/rkhunter/templates/rkhunter.conf.j2 b/roles/rkhunter/templates/rkhunter.conf.j2 index 068194e55f..e474b6ab36 100644 --- a/roles/rkhunter/templates/rkhunter.conf.j2 +++ b/roles/rkhunter/templates/rkhunter.conf.j2 @@ -200,7 +200,12 @@ ALLOW_SSH_PROT_V1=0 # tests, the test names, and how rkhunter behaves when these options are used. # ENABLE_TESTS="all" +{% if ansible_hostname.startswith('fed-cloud') %} +# Disable the promisc test here as openstack has it set on interfaces +DISABLE_TESTS="suspscan hidden_procs deleted_files packet_cap_apps apps promisc" +{% else %} DISABLE_TESTS="suspscan hidden_procs deleted_files packet_cap_apps apps" +{% endif %} # # The HASH_FUNC option can be used to specify the command to use