rene/ansible-pull
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

logic changed

Browse Source
This commit is contained in:
Rene Mewissen
2025-10-02 09:16:34 +02:00
parent 08ad24fa0f
commit b716c10477
3 changed files with 35 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
roles/bastionhost/tasks/system_setup/package_hardening.yml
View File

@@ -23,7 +23,7 @@
- fortune-mod
state: absent
purge: true # Also removes configuration files
notify: Update_aide_database
register: deb_packages_removed
when: ansible_os_family == "Debian"
- name: system setup | package hardening | remove unnecessary packages (RedHat family)
@@ -40,5 +40,10 @@
- avahi
- sudo
state: absent
notify: Update_aide_database
when: ansible_os_family == "RedHat"
register: rh_packages_removed
when: ansible_os_family == "RedHat"
- name: Set fact if packages were removed
set_fact:
aide_db_needs_update: true
when: (deb_packages_removed is defined and deb_packages_removed.changed) or (rh_packages_removed is defined and rh_packages_removed.changed)