diff --git a/local.yml b/local.yml index 3946c23..364c69f 100644 --- a/local.yml +++ b/local.yml @@ -48,11 +48,11 @@ - name: pre-run | upgrade system (debian, ubuntu, etc.) apt: upgrade=dist #changed_when: false - notify: update aide database + notify: Update_aide_database when: ansible_distribution in ["Debian", "Ubuntu", "Linux Mint"] - name: pre-run | upgrade system (arch) pacman: upgrade=true - notify: update aide database + notify: Update_aide_database when: ansible_distribution == 'Archlinux' # run roles diff --git a/main.yml b/main.yml index e7fde32..2381d07 100644 --- a/main.yml +++ b/main.yml @@ -1,5 +1,5 @@ --- -- name: update aide database +- name: Update_aide_database block: # This block is now a task within the handler - name: system setup | aide | run aide --update to check for legitimate changes tags: aide,hardening,system diff --git a/roles/bastionhost/handlers/main.yml b/roles/bastionhost/handlers/main.yml index 2a76ffa..f666ac9 100644 --- a/roles/bastionhost/handlers/main.yml +++ b/roles/bastionhost/handlers/main.yml @@ -1,5 +1,5 @@ --- -- name: update aide database +- name: Update_aide_database tags: aide,hardening,system block: - name: system setup | aide | run aide --update to check for legitimate changes diff --git a/roles/bastionhost/tasks/system_setup/openssh_hardening.yml b/roles/bastionhost/tasks/system_setup/openssh_hardening.yml index b5611d9..0ec12bf 100644 --- a/roles/bastionhost/tasks/system_setup/openssh_hardening.yml +++ b/roles/bastionhost/tasks/system_setup/openssh_hardening.yml @@ -35,4 +35,4 @@ Match User lowpriv,sshjumpuser AllowAgentForwarding yes AllowTcpForwarding yes - notify: [ "restart_sshd", "update aide database" ] \ No newline at end of file + notify: [ "restart_sshd", "Update_aide_database" ] \ No newline at end of file diff --git a/roles/bastionhost/tasks/system_setup/package_hardening.yml b/roles/bastionhost/tasks/system_setup/package_hardening.yml index edaed77..fb640da 100644 --- a/roles/bastionhost/tasks/system_setup/package_hardening.yml +++ b/roles/bastionhost/tasks/system_setup/package_hardening.yml @@ -22,7 +22,7 @@ - fortune-mod state: absent purge: true # Also removes configuration files - notify: update aide database + notify: Update_aide_database when: ansible_os_family == "Debian" - name: system setup | package hardening | remove unnecessary packages (RedHat family) @@ -38,5 +38,5 @@ - cups* - avahi state: absent - notify: update aide database + notify: Update_aide_database when: ansible_os_family == "RedHat" \ No newline at end of file diff --git a/roles/bastionhost/tasks/system_setup/user_hardening.yml b/roles/bastionhost/tasks/system_setup/user_hardening.yml index 19a3e4d..9c2d931 100644 --- a/roles/bastionhost/tasks/system_setup/user_hardening.yml +++ b/roles/bastionhost/tasks/system_setup/user_hardening.yml @@ -20,5 +20,5 @@ - irc - gnats - games - notify: update aide database + notify: Update_aide_database ignore_errors: true # Some users might not exist, which is fine \ No newline at end of file