infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

proxies: allow another shm file that apache seems to make now.

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2019-04-11 04:36:10 +00:00
parent 55b5ef7f2c
commit b8d73fde1e
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
roles/rkhunter/templates/rkhunter.conf.j2
View file

@ -410,6 +410,9 @@ ALLOWDEVFILE=/dev/shm/spice.*
{% if inventory_hostname in groups['ipa'] or inventory_hostname in groups['ipa-stg'] %}
ALLOWDEVFILE=/dev/shm/sem.slapd*.stats
{% endif %}
{% if inventory_hostname in groups['proxies'] or inventory_hostname in groups['proxies-stg'] %}
ALLOWDEVFILE=/dev/shm/libpod_lock
{% endif %}
{% if inventory_hostname in groups['pgbdr'] or inventory_hostname in groups['pgbdr-stg'] or inventory_hostname == 'ci-cc-rdu01.fedoraproject.org' or inventory_hostname == 'hubs01.stg.phx2.fedoraproject.org' or inventory_hostname == 'db-koji01.stg.phx2.fedoraproject.org' or inventory_hostname == 'db-qa03.qa.fedoraproject.org' %}
ALLOWDEVFILE=/dev/shm/PostgreSQL*
{% endif %}