openstack/ansible-hardening
Code Issues Proposed changes

Install chrony when enabled in RHEL7 STIG

Browse Source 
Chrony was not being installed by the RHEL7 STIG package list when
enabled, causing a failure when the service configuration was
attempted.

This fixes the following failure:
http://cdn.pasteraw.com/7vo74lbz1jyf9qm5010mfqa169a8zpf

Change-Id: I6accac5504abe6fb1f2d0d0db5baa9b5a42a5c70
This commit is contained in:
Logan V 2017-01-21 18:52:09 -06:00
parent 1ed53ab6da
commit dc8dc3dbf9
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
vars/redhat.yml
View File

@ -116,6 +116,10 @@ stig_packages_rhel7:
- selinux-policy-targeted
state: "{{ security_package_state }}"
enabled: "{{ security_rhel7_enable_linux_security_module }}"
- packages:
- chrony
state: "{{ security_package_state }}"
enabled: "{{ security_rhel7_enable_chrony }}"
- packages:
- clamav
- clamav-data

4
vars/ubuntu.yml
View File

@ -119,6 +119,10 @@ stig_packages_rhel7:
- apparmor-utils
state: "{{ security_package_state }}"
enabled: "{{ security_rhel7_enable_linux_security_module }}"
- packages:
- chrony
state: "{{ security_package_state }}"
enabled: "{{ security_rhel7_enable_chrony }}"
- packages:
- clamav
- clamav-daemon