Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Complete tests for OS hardening #660

Closed
schurzi opened this issue Apr 11, 2023 · 0 comments · Fixed by #722
Closed

Complete tests for OS hardening #660

schurzi opened this issue Apr 11, 2023 · 0 comments · Fixed by #722

Comments

@schurzi
Copy link
Contributor

schurzi commented Apr 11, 2023

Description

Our current testcase does not fully support arch linux.

Solution

We want to adapt the test in a way, that supports these linux flavors.

Alternatives

  • find a more general way to handel auditd restarts
  • create a second handler for arch (or a separate for RHEL)

Additional information

The current test breaks on restart of audit (https://github.com/dev-sec/ansible-collection-hardening/actions/runs/4664154817/jobs/8256129393)

  RUNNING HANDLER [devsec.hardening.os_hardening : Restart auditd] ***************
  Tuesday 11 April 2023  07:28:40 +0200 (0:00:00.185)       0:02:19.632 *********
  fatal: [runner1]: FAILED! => {"changed": false, "cmd": "service auditd restart", "msg": "[Errno 2] No such file or directory: b'service'", "rc": 2, "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": []}

the cause for this should be our RedHat workaround:

- name: Restart auditd # noqa command-instead-of-module
ansible.builtin.command:
cmd: service auditd restart # rhel: see: https://access.redhat.com/solutions/2664811

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant