ansible/playbooks/rkhunter_update.yml

# requires --extra-vars="target='host1:host2:group etc' yumcommand=update'"

---
- name: Update all run rkhunter if installed
  hosts: "{{ target }}"
  user: root

  tasks:
  - name: Expire-caches
    ansible.builtin.command: yum clean expire-cache

  - name: Yum -y {{ yumcommand }}
    ansible.builtin.command: yum -y {{ yumcommand }}
    async: 7200
    poll: 15

  - name: Check for rkhunter
    ansible.builtin.command: /usr/bin/test -f /usr/bin/rkhunter
    register: rkhunter
    ignore_errors: true

  - name: Run rkhunter --propupd
    ansible.builtin.command: /usr/bin/rkhunter --propupd
    when: rkhunter is success