[sysadmin-notify] [ansible] clean-up
commit 273e1ec7be56657e3687cbb895d5b167d2a25247
Author: Nicolas Chauvet <kwizart(a)gmail.com>
Date: Wed Sep 20 08:38:07 2017 +0200
clean-up
roles/rkhunter/templates/rkhunter.conf.j2 | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/roles/rkhunter/templates/rkhunter.conf.j2
b/roles/rkhunter/templates/rkhunter.conf.j2
index fc0b7f3..ecdfa91 100644
--- a/roles/rkhunter/templates/rkhunter.conf.j2
+++ b/roles/rkhunter/templates/rkhunter.conf.j2
@@ -383,11 +383,11 @@ ALLOWDEVFILE=/dev/shm/squid-cache_mem_space.shm
ALLOWDEVFILE=/dev/shm/squid-cf__readers.shm
ALLOWDEVFILE=/dev/shm/squid-cf__queues.shm
ALLOWDEVFILE=/dev/shm/squid-cf__metadata.shm
-{% if inventory_hostname in groups['virtservers'] or inventory_hostname in
groups['openqa-workers'] or inventory_hostname in
groups['openqa-stg-workers'] or inventory_hostname in
groups['taskotron-stg-client-hosts'] or inventory_hostname in
groups['taskotron-dev-client-hosts'] %}
+{% if inventory_hostname in groups['virtservers'] %}
# libvirt spice device makes a /dev/shm/spice file
ALLOWDEVFILE=/dev/shm/spice.*
{% endif %}
-{% if inventory_hostname in groups['ipa'] or inventory_hostname in
groups['ipa-stg'] %}
+{% if inventory_hostname in groups['ipa'] %}
ALLOWDEVFILE=/dev/shm/sem.slapd*.stats
{% endif %}
ALLOWDEVFILE=/dev/shm/PostgreSQL*