infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 7 Projects Releases Packages Wiki Activity Actions

add some exceptions for kojipkgs squid and rkhunter

Browse source
This commit is contained in:
Kevin Fenzi 2016-12-30 16:17:15 +00:00
parent ebf89e06c9
commit f57fc5fde4
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
roles/rkhunter/templates/rkhunter.conf.j2
View file

@ -388,6 +388,14 @@ ALLOWDEVFILE=/dev/shm/fmn-cache.dbm
{% if ansible_hostname.startswith('kojipkgs') %}
ALLOWDEVFILE=/dev/shm/squid-squid-page-pool.shm
ALLOWDEVFILE=/dev/shm/squid-cache_mem.shm
ALLOWDEVFILE=/dev/shm/squid-ssl_session_cache.shm
ALLOWDEVFILE=/dev/shm/squid-cache_mem_ex.shm
ALLOWDEVFILE=/dev/shm/squid-cache_mem_map_slices.shm
ALLOWDEVFILE=/dev/shm/squid-cache_mem_map_anchors.shm
ALLOWDEVFILE=/dev/shm/squid-cache_mem_space.shm
ALLOWDEVFILE=/dev/shm/squid-cf__readers.shm
ALLOWDEVFILE=/dev/shm/squid-cf__queues.shm
ALLOWDEVFILE=/dev/shm/squid-cf__metadata.shm
{% endif %}
{% if inventory_hostname in groups['virtservers'] or inventory_hostname in groups['openqa-workers'] or inventory_hostname in groups['openqa-stg-workers'] or inventory_hostname in groups['taskotron-stg-client-hosts'] or inventory_hostname in groups['taskotron-dev-client-hosts'] %}
# libvirt spice device makes a /dev/shm/spice file