Install and configure Lynis in Debian-like systems
lynis_colors
: [default:'yes'
]: Use colored outputlynis_compressed_uploads
: [default:'yes'
]: Compressed uploads (set to zero when errors with uploading occur)lynis_error_on_warnings
: [default:'no'
]: Show non-zero exit code when warnings are foundlynis_language
: [default:''
]: Use Lynis in your own language (by default auto-detected)lynis_license_key
: [default:''
]: Lynis Enterprise license keylynis_machine_role
: [default:server
]: Defines the role of the system (personal, workstation or server)lynis_profile_name
: [default:Default Audit Template
]: Profile name, will be used as title/descriptionlynis_pause_between_tests
: [default:0
]: Number of seconds to pause between every test (0 is no pause)lynis_quick
: [default:'no'
]: Enable quick mode (no waiting for keypresses, same as --quick option)lynis_refresh_repositories
: [default:'yes'
]: Refresh software repositories to help detecting vulnerable packageslynis_show_report_solution
: [default:'yes'
]: Show solution for findingslynis_show_tool_tips
: [default:'yes'
]: Show inline tips about the toollynis_skip_plugins
: [default:'no'
]: Skip pluginslynis_skip_tests
: [default:[]
]: Skip a test (one per line) or skip a particular option within a test (when applicable)lynis_test_scan_mode
: [default:full
]: Scan type - how deep the audit should be (light, normal or full)lynis_upload
: [default:'no'
]: Upload data to central serverlynis_upload_server
: [default:''
]: The hostname/IP address to receive the datalynis_upload_options
: [default:''
]: Provide options to cURL (or other upload tool) when uploading data. Upload-options=--insecure --> use HTTPS, but skip certificate check (e.g. self-signed)lynis_verbose
: [default:'no'
]: Verbose outputlynis_plugins
: [default:[]
]: Lynis Plugins
None
- hosts: all
roles:
- lynis
MIT