-
Notifications
You must be signed in to change notification settings - Fork 718
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Revert "fix: aide/remediations: add crontabs" #10766
Conversation
This reverts commit ac8389e. Fixes ComplianceAsCode#10725
This datastream diff is auto generated by the check Click here to see the full diffbash remediation for rule 'xccdf_org.ssgproject.content_rule_aide_periodic_cron_checking' differs.
--- xccdf_org.ssgproject.content_rule_aide_periodic_cron_checking
+++ xccdf_org.ssgproject.content_rule_aide_periodic_cron_checking
@@ -3,9 +3,6 @@
if ! rpm -q --quiet "aide" ; then
yum install -y "aide"
-fi
-if ! rpm -q --quiet "crontabs" ; then
- yum install -y "crontabs"
fi
if ! grep -q "/usr/sbin/aide --check" /etc/crontab ; then
ansible remediation for rule 'xccdf_org.ssgproject.content_rule_aide_periodic_cron_checking' differs.
--- xccdf_org.ssgproject.content_rule_aide_periodic_cron_checking
+++ xccdf_org.ssgproject.content_rule_aide_periodic_cron_checking
@@ -1,9 +1,9 @@
- name: Ensure AIDE is installed
package:
- name:
- - aide
- - crontabs
+ name: '{{ item }}'
state: present
+ with_items:
+ - aide
when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
tags:
- CCE-80676-0
bash remediation for rule 'xccdf_org.ssgproject.content_rule_aide_scan_notification' differs.
--- xccdf_org.ssgproject.content_rule_aide_scan_notification
+++ xccdf_org.ssgproject.content_rule_aide_scan_notification
@@ -3,9 +3,6 @@
if ! rpm -q --quiet "aide" ; then
yum install -y "aide"
-fi
-if ! rpm -q --quiet "crontabs" ; then
- yum install -y "crontabs"
fi
var_aide_scan_notification_email=''
ansible remediation for rule 'xccdf_org.ssgproject.content_rule_aide_scan_notification' differs.
--- xccdf_org.ssgproject.content_rule_aide_scan_notification
+++ xccdf_org.ssgproject.content_rule_aide_scan_notification
@@ -6,10 +6,10 @@
- name: Ensure AIDE is installed
package:
- name:
- - aide
- - crontabs
+ name: '{{ item }}'
state: present
+ with_items:
+ - aide
when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
tags:
- CCE-82891-3 |
Code Climate has analyzed commit 8f31dae and detected 0 issues on this pull request. The test coverage on the diff in this pull request is 100.0% (50% is the threshold). This pull request will bring the total coverage in the repository to 53.4% (0.0% change). View more on Code Climate. |
only failed test does not seem related to this PR. |
Waving the automatus test as it does not appear to be related. |
Description:
Rationale: