Refactor AIDE configuration and add exclusion paths

2024-10-05 21:19:51 +02:00
parent 9c02c2b839
commit 90852bb9a6
13 changed files with 47 additions and 22 deletions
@@ -69,11 +69,9 @@
    backup: true
    insertafter: EOF
    block: |
-      !/var/lib/docker
-      !/var/lib/lxcfs
-      !/var/lib/private/systemd
-      !/var/log/audit
-      !/var/log/journal
+      {% for exclude in _aide_exclude %}
+      {{ exclude }}
+      {% endfor %}
  when: ansible_os_family == "Debian"
  tags:
    - aide
@@ -221,6 +221,13 @@
  tags:
    - roles::cis::extras

+- name: Configure aide
+  ansible.builtin.include_tasks: aide.yml
+  when: install_aide
+  tags:
+    - roles::cis::aide
+
+
 - name: Miscellaneous tasks after all handlers
  ansible.builtin.include_tasks: post.yml
  tags: