https://github.com/ramsailopal/cac-lynis

Ansible role for Compliance as code against Lynis on Ubuntu
https://github.com/ramsailopal/cac-lynis

Last synced: about 5 hours ago
JSON representation

Ansible role for Compliance as code against Lynis on Ubuntu

• Host: GitHub
• URL: https://github.com/ramsailopal/cac-lynis
• Owner: RamSailopal
• License: mit
• Created: 2022-04-14T14:36:02.000Z (over 2 years ago)
• Default Branch: main
• Last Pushed: 2022-08-03T10:36:57.000Z (over 2 years ago)
• Last Synced: 2023-03-08T13:39:43.977Z (over 1 year ago)
• Language: Shell
• Homepage:
• Size: 92.8 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Role Name

=========

Ansible role to install Lynis on Ubuntu and configure the server to be as compliant as possible against the Lynis system audit.

# Role Variables

--------------

**rat** - Linus returns a hardened rating once it has run and the rat variable will be compared to this rating to determine a success or failure. For example is the actual hardened rating was 70 and rat was set to 80, there will be a failure. Conversely, if the rating was 70 and rat was set to 60, there would be a success. 

**rkpause** The time in minutes, to wait for rkhunter to complete before checking the output log (The reason this has been implemented is due to a hanging bug in Github actions) Default value is 10 minutes.

The default for **rat** is 70

    - hosts: servers

      roles: 

        - Cac-Lynis

      vars:

        rat: 60

# License

-------

BSD

# References

------------------

Lynis - https://github.com/CISOfy/lynis

# Author Information

------------------

Raman Sailopal