commit 273e1ec7be56657e3687cbb895d5b167d2a25247 Author: Nicolas Chauvet <kwizart(a)gmail.com&gt; Date: Wed Sep 20 08:38:07 2017 +0200 clean-up roles/rkhunter/templates/rkhunter.conf.j2 | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) --- diff --git a/roles/rkhunter/templates/rkhunter.conf.j2 b/roles/rkhunter/templates/rkhunter.conf.j2 index fc0b7f3..ecdfa91 100644 --- a/roles/rkhunter/templates/rkhunter.conf.j2 +++ b/roles/rkhunter/templates/rkhunter.conf.j2 @@ -383,11 +383,11 @@ ALLOWDEVFILE=/dev/shm/squid-cache_mem_space.shm ALLOWDEVFILE=/dev/shm/squid-cf__readers.shm ALLOWDEVFILE=/dev/shm/squid-cf__queues.shm ALLOWDEVFILE=/dev/shm/squid-cf__metadata.shm -{% if inventory_hostname in groups['virtservers'] or inventory_hostname in groups['openqa-workers'] or inventory_hostname in groups['openqa-stg-workers'] or inventory_hostname in groups['taskotron-stg-client-hosts'] or inventory_hostname in groups['taskotron-dev-client-hosts'] %} +{% if inventory_hostname in groups['virtservers'] %} # libvirt spice device makes a /dev/shm/spice file ALLOWDEVFILE=/dev/shm/spice.* {% endif %} -{% if inventory_hostname in groups['ipa'] or inventory_hostname in groups['ipa-stg'] %} +{% if inventory_hostname in groups['ipa'] %} ALLOWDEVFILE=/dev/shm/sem.slapd*.stats {% endif %} ALLOWDEVFILE=/dev/shm/PostgreSQL*