Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

proxies: adjust rkhunter for new non root mirrorlist pods

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2019-11-08 16:57:17 +00:00 • committed by Pierre-Yves Chibon
parent 2f20b29c57
commit 9b14a4aaf5
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/rkhunter/templates/rkhunter.conf.j2
View file

@ -406,7 +406,7 @@ ALLOWDEVFILE=/dev/shm/spice.*
ALLOWDEVFILE=/dev/shm/sem.slapd*.stats
{% endif %}
{% if inventory_hostname in groups['proxies'] or inventory_hostname in groups['proxies_stg'] %}
ALLOWDEVFILE=/dev/shm/libpod_lock
ALLOWDEVFILE=/dev/shm/libpod_rootless_lock_441
{% endif %}
{% if inventory_hostname in groups['pgbdr'] or inventory_hostname in groups['pgbdr_stg'] or inventory_hostname == 'ci-cc-rdu01.fedoraproject.org' or inventory_hostname == 'hubs01.stg.phx2.fedoraproject.org' or inventory_hostname == 'db-koji01.stg.phx2.fedoraproject.org' or inventory_hostname == 'db-qa03.qa.fedoraproject.org' %}
ALLOWDEVFILE=/dev/shm/PostgreSQL*