Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

rkhunter: adjust for rhel9

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2022-06-01 12:02:17 -07:00
parent 4106935f50
commit a5dc93c76d
3 changed files with 8 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

2
inventory/group_vars/dns
View file

@ -10,7 +10,7 @@ ipa_client_sudo_groups:
ipa_host_group: dns ipa_host_group: dns
ipa_host_group_desc: DNS servers ipa_host_group_desc: DNS servers
lvm_size: 30000 lvm_size: 30000
mem_size: 2048 mem_size: 4096
nagios_has_named: true nagios_has_named: true
nrpe_procs_crit: 500 nrpe_procs_crit: 500
nrpe_procs_warn: 300 nrpe_procs_warn: 300

12
inventory/host_vars/proxy02.fedoraproject.org
View file

@ -13,11 +13,11 @@ eth0_ipv6_nm: 64
freezes: true freezes: true
has_ipv4: yes has_ipv4: yes
has_ipv6: true has_ipv6: true
ks_repo: http://38.145.60.16/pub/fedora/linux/releases/35/Server/x86_64/os/ ks_repo: http://38.145.60.16/pub/fedora/linux/releases/36/Server/x86_64/os/
ks_url: http://38.145.60.16/repo/rhel/ks/kvm-fedora ks_url: http://38.145.60.16/repo/rhel/ks/kvm-fedora
mac0: 52:54:00:8c:7c:1b mac0: 52:54:00:8c:7c:1b
max_mem_size: 8192 max_mem_size: 65536
mem_size: 8192 mem_size: 24576
network_connections: network_connections:
- autoconnect: yes - autoconnect: yes
ip: ip:
@ -39,11 +39,11 @@ network_connections:
type: ethernet type: ethernet
nrpe_procs_crit: 1400 nrpe_procs_crit: 1400
nrpe_procs_warn: 1200 nrpe_procs_warn: 1200
num_cpus: 6 num_cpus: 4
postfix_group: vpn postfix_group: vpn
public_hostname: proxy02.fedoraproject.org public_hostname: proxy02.fedoraproject.org
# This is consumed by the roles/fedora-web/main role # This is consumed by the roles/fedora-web/main role
sponsor: internetx sponsor: internetx
vmhost: internetx01.fedoraproject.org vmhost: internetx02.fedoraproject.org
volgroup: /dev/vg_Server volgroup: /dev/vg_guests
vpn: true vpn: true

2
roles/rkhunter/templates/rkhunter.conf.j2
View file

@ -633,7 +633,7 @@ SCRIPTWHITELIST=/usr/bin/whatis
SCRIPTWHITELIST=/usr/bin/ldd SCRIPTWHITELIST=/usr/bin/ldd
SCRIPTWHITELIST=/usr/bin/groups SCRIPTWHITELIST=/usr/bin/groups
SCRIPTWHITELIST=/usr/bin/GET SCRIPTWHITELIST=/usr/bin/GET
{% if ansible_distribution_major_version|int >= 30 %} {% if ansible_distribution_major_version|int >= 9 %}
# no network-scripts on newest fedora # no network-scripts on newest fedora
#SCRIPTWHITELIST=/sbin/ifup #SCRIPTWHITELIST=/sbin/ifup
#SCRIPTWHITELIST=/sbin/ifdown #SCRIPTWHITELIST=/sbin/ifdown