infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

add new fips junk that just landed in f28 for some reason

Browse source
This commit is contained in:
Kevin Fenzi 2018-07-14 18:28:57 +00:00
parent a2a8a63f04
commit b3a9cb6df6
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
roles/rkhunter/templates/rkhunter.conf.j2
View file

@ -326,6 +326,14 @@ ALLOWHIDDENFILE=/usr/bin/.ssh-keyscan.hmac
ALLOWHIDDENFILE=/usr/bin/.ssh-keygen.hmac
ALLOWHIDDENFILE=/usr/bin/.ssh.hmac
ALLOWHIDDENFILE=/usr/bin/.fipscheck.hmac
{% if ansible_distribution_version|int > 27 %}
# In Fedora 28+ there's a new package for dracut that does the FIPs stuff
ALLOWHIDDENFILE=/usr/bin/.sha1hmac.hmac
ALLOWHIDDENFILE=/usr/bin/.sha224hmac.hmac
ALLOWHIDDENFILE=/usr/bin/.sha256hmac.hmac
ALLOWHIDDENFILE=/usr/bin/.sha384hmac.hmac
ALLOWHIDDENFILE=/usr/bin/.sha512hmac.hmac
{% endif %}
ALLOWHIDDENFILE=/usr/sbin/.sshd.hmac
ALLOWHIDDENFILE=/usr/share/man/man5/.k5login.5.gz
ALLOWHIDDENFILE=/usr/share/man/man5/.k5identity.5.gz