Mirrors/ansible-collection-hardening
2
0
Fork 0
mirror of https://github.com/dev-sec/ansible-collection-hardening synced 2024-11-10 09:14:18 +00:00
Code Issues Projects Releases Packages Wiki Activity

add more tests to the os-hardening vm tests

Browse source 
Signed-off-by: Sebastian Gumprich <sebastian.gumprich@t-systems.com>
This commit is contained in:
Sebastian Gumprich 2022-07-15 09:10:47 +02:00
parent 26e37cabc5
commit c05fe8b520
1 changed files with 12 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
molecule/os_hardening_vm/converge.yml
View file

@ -10,7 +10,7 @@
- devsec.hardening
tasks:
- name: override for arch
set_fact:
set_fact:
os_mnt_boot_enabled: false
when: ansible_facts.os_family == 'Archlinux'
- include_role:
@ -21,3 +21,14 @@
os_yum_repo_file_whitelist: ['foo.repo']
os_mnt_boot_enabled: true
os_mnt_boot_src: "/dev/vda1"
os_mnt_var_log_audit_enabled: true
os_auditd_enabled: true
os_mnt_boot_enabled: true
os_mnt_dev_enabled: true
os_mnt_dev_shm_enabled: true
os_mnt_home_enabled: true
os_mnt_run_enabled: true
os_mnt_var_enabled: true
os_mnt_var_log_enabled: true
os_mnt_var_log_audit_enabled: true
os_mnt_var_tmp_enabled: true