openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/source/developer-notes/V-51391.rst
Major Hayden 53f9b60e58 V-51391: Initialize AIDE 
Closes-bug: 1505793

Implements: blueprint security-hardening

Change-Id: Ia15368c0af184054c5be60c893c751e449b8770a
2015-10-19 07:32:22 -05:00

565 B
Raw Blame History

When AIDE is first installed for V-38429, a new database will be created. The creation process takes some time because AIDE needs to review each file in its list of monitored files to get timestamps and hashes. The initialization will be forked into the background so that it doesn't slow down the playbook run.

Some directories are excluded from AIDE runs to prevent AIDE from wandering into directories where it shouldn't be hashing/monitoring files. The defaults/main.yml file has some recommended directories as part of the aide_exclude_dirs variable.