From c05fe8b5205b02fce0ec22f0acbe636c256c55ae Mon Sep 17 00:00:00 2001 From: Sebastian Gumprich Date: Fri, 15 Jul 2022 09:10:47 +0200 Subject: [PATCH] add more tests to the os-hardening vm tests Signed-off-by: Sebastian Gumprich --- molecule/os_hardening_vm/converge.yml | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/molecule/os_hardening_vm/converge.yml b/molecule/os_hardening_vm/converge.yml index 12a28ab4..968a1ca2 100644 --- a/molecule/os_hardening_vm/converge.yml +++ b/molecule/os_hardening_vm/converge.yml @@ -10,7 +10,7 @@ - devsec.hardening tasks: - name: override for arch - set_fact: + set_fact: os_mnt_boot_enabled: false when: ansible_facts.os_family == 'Archlinux' - include_role: @@ -21,3 +21,14 @@ os_yum_repo_file_whitelist: ['foo.repo'] os_mnt_boot_enabled: true os_mnt_boot_src: "/dev/vda1" + os_mnt_var_log_audit_enabled: true + os_auditd_enabled: true + os_mnt_boot_enabled: true + os_mnt_dev_enabled: true + os_mnt_dev_shm_enabled: true + os_mnt_home_enabled: true + os_mnt_run_enabled: true + os_mnt_var_enabled: true + os_mnt_var_log_enabled: true + os_mnt_var_log_audit_enabled: true + os_mnt_var_tmp_enabled: true