Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

rkhunter: adjust some paramters to avoid false positives

Browse source 
zabbix_agent uses shm (and a fair bit of it), so bump that check up all
around.
Change the ipa whitelist, as it's changed files in new ipa.
There's no longer a system subdir involved.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2024-04-01 09:28:54 -07:00
parent 1c7f6efea0
commit 998959d683
1 changed files with 3 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

8
roles/rkhunter/templates/rkhunter.conf.j2
View file

@ -608,8 +608,8 @@ OS_VERSION_FILE=/etc/{{ ansible_distribution|lower }}-release
#RTKT_DIR_WHITELIST=""
#RTKT_FILE_WHITELIST=""
{% if inventory_hostname in groups['ipa'] or inventory_hostname in groups['ipa_stg'] %}
RTKT_FILE_WHITELIST="/var/log/pki/pki-tomcat/ca/system"
RTKT_FILE_WHITELIST="/var/log/pki/pki-tomcat/kra/system"
RTKT_FILE_WHITELIST="/var/log/pki/pki-tomcat/ca"
RTKT_FILE_WHITELIST="/var/log/pki/pki-tomcat/kra"
{% endif %}
#
@ -638,7 +638,5 @@ SCRIPTWHITELIST=/usr/bin/GET
SCRIPTWHITELIST=/sbin/ifup
SCRIPTWHITELIST=/sbin/ifdown
{% endif %}
{% if inventory_hostname.startswith(('db','pagure','retrace','anitya','upstream')) %}
# Set this size very large on postgres running servers.
# zabbix uses shm and can grow quite large, so bump this limit a lot.
IPC_SEG_SIZE=100000000000
{% endif %}