openstack/ansible-hardening
Code Issues Proposed changes

Fix the path of chrony.keys

Browse Source 
The path of chrony.keys on CentOS is different
from the one on Ubuntu. So change the definition
of keyfile to use variable defined in vars.

Change-Id: Ibb54318d5fff452857d917e3b13af6bae26a1b55
Signed-off-by: Yifei Xue <xueyifei@huawei.com>
This commit is contained in:
Yifei Xue 2017-12-22 09:57:50 +08:00
parent 04365d3ec1
commit 8025799fe6
4 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
templates/chrony.conf.j2
View File

@ -27,7 +27,7 @@ server {{ ntp_server }} offline maxpoll 10 minpoll 8
# password is generated by a random process at install time. You may
# change it if you wish.
keyfile /etc/chrony/chrony.keys
keyfile {{ chrony_key_file }}
# Set runtime command key. Note that if you change the key (not the
# password) to anything other than 1 you will need to edit

1
vars/debian.yml
View File

@ -34,6 +34,7 @@ aide_cron_job_path: /etc/cron.daily/aide
aide_database_file: /var/lib/aide/aide.db
aide_database_out_file: /var/lib/aide/aide.db.new
chrony_conf_file: /etc/chrony/chrony.conf
chrony_key_file: /etc/chrony/chrony.keys
daemon_init_params_file: /etc/init.d/rc
# Service name

1
vars/redhat.yml
View File

@ -30,6 +30,7 @@ aide_cron_job_path: /etc/cron.d/aide
aide_database_file: /var/lib/aide/aide.db.gz
aide_database_out_file: /var/lib/aide/aide.db.new.gz
chrony_conf_file: /etc/chrony.conf
chrony_key_file: /etc/chrony.keys
daemon_init_params_file: /etc/init.d/functions
pkg_mgr_config: "{{ (ansible_pkg_mgr == 'yum') | ternary('/etc/yum.conf', '/etc/dnf/dnf.conf') }}"

1
vars/suse.yml
View File

@ -32,6 +32,7 @@ aide_cron_job_path: /etc/cron.daily/aide
aide_database_file: /var/lib/aide/aide.db
aide_database_out_file: /var/lib/aide/aide.db.new
chrony_conf_file: /etc/chrony.conf
chrony_key_file: /etc/chrony.keys
daemon_init_params_file: /etc/rc.status
pkg_mgr_config: /etc/zypp/zypp.conf