openstack/ansible-hardening
Code Issues Proposed changes

Don't start LSM in check mode

Browse Source 
This patch checks to see if the role is being run in check mode. If it
is in check mode, the AppArmor service will not be started and the
SELinux configuration will not be adjusted.

Change-Id: Iae976f283df77556a71833f857a906097e6f8aeb
This commit is contained in:
Major Hayden 2016-06-02 15:30:16 -05:00
parent 0e85c4fa5f
commit 45330fee23
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tasks/lsm.yml
View File

@ -36,6 +36,7 @@
when:
- ansible_os_family == "Debian"
- security_enable_linux_security_module | bool
- not check_mode
tags:
- cat2
- V-51337
@ -64,6 +65,7 @@
when:
- ansible_os_family == "RedHat"
- security_enable_linux_security_module | bool
- not check_mode
tags:
- cat2
- V-51337