Feat(debian/security): Configure Debian security checks

[ansible.git] / playbooks / roles / debian / security / tasks / main.yml

diff --git a/playbooks/roles/debian/security/tasks/main.yml b/playbooks/roles/debian/security/tasks/main.yml
new file mode 100644 (file)
index 0000000..d4a08cd
--- /dev/null
+++ b/playbooks/roles/debian/security/tasks/main.yml
@@ -0,0 +1,8 @@
+- name: Install chkrootkit and debsecan
+  become: true
+  apt:
+    cache_valid_time: 3600
+    install_recommends: no
+    name: ['chkrootkit', 'debsecan']
+    state: latest
+    update_cache: yes