chore: update

This commit is contained in:
Xor290
2026-08-08 12:04:57 +02:00
parent 56aef1fa9b
commit 8e36acd812
76 changed files with 12710 additions and 29 deletions
+6 -1
View File
@@ -24,7 +24,7 @@
# ansible-playbook hardening/playbook-apparmor-hardening.yml --limit pre-prod-uber
- name: Durcissement AppArmor (CIS Ubuntu 24.04)
hosts: prod,pre-prod,bdd-redis-prod,replica-prod,infra,infra-runner,infra-utils,load-balancer
hosts: prod,pre-prod,bdd-redis-prod,replica-prod,infra,infra-runner,infra-utils,ota-uber,load-balancer
become: true
serial: 1
any_errors_fatal: true
@@ -69,6 +69,11 @@
cmd: aa-enforce /etc/apparmor.d/*
changed_when: true
- name: Recharger apparmor (aa-enforce seul ne suffit pas toujours a faire prendre en compte le changement par le kernel)
ansible.builtin.systemd:
name: apparmor
state: reloaded
- name: Verifier l'etat final (apparmor_status)
ansible.builtin.command:
cmd: apparmor_status