chore: update
This commit is contained in:
@@ -24,7 +24,7 @@
|
||||
# ansible-playbook hardening/playbook-apparmor-hardening.yml --limit pre-prod-uber
|
||||
|
||||
- name: Durcissement AppArmor (CIS Ubuntu 24.04)
|
||||
hosts: prod,pre-prod,bdd-redis-prod,replica-prod,infra,infra-runner,infra-utils,load-balancer
|
||||
hosts: prod,pre-prod,bdd-redis-prod,replica-prod,infra,infra-runner,infra-utils,ota-uber,load-balancer
|
||||
become: true
|
||||
serial: 1
|
||||
any_errors_fatal: true
|
||||
@@ -69,6 +69,11 @@
|
||||
cmd: aa-enforce /etc/apparmor.d/*
|
||||
changed_when: true
|
||||
|
||||
- name: Recharger apparmor (aa-enforce seul ne suffit pas toujours a faire prendre en compte le changement par le kernel)
|
||||
ansible.builtin.systemd:
|
||||
name: apparmor
|
||||
state: reloaded
|
||||
|
||||
- name: Verifier l'etat final (apparmor_status)
|
||||
ansible.builtin.command:
|
||||
cmd: apparmor_status
|
||||
|
||||
Reference in New Issue
Block a user