From: Oleg Broytman <phd@phdru.name>
Date: Wed, 9 Mar 2022 04:37:25 +0000 (+0300)
Subject: Feat(debian/security): Configure Debian security checks
X-Git-Url: https://git.phdru.name/?a=commitdiff_plain;h=e325a0c297f1c41fc93fb39ee27ed6c7969f4ad9;p=ansible.git

Feat(debian/security): Configure Debian security checks

Install `chkrootkit` and `debsecan`.
---

diff --git a/playbooks/roles/debian/security/README.txt b/playbooks/roles/debian/security/README.txt
new file mode 100644
index 0000000..0e5f773
--- /dev/null
+++ b/playbooks/roles/debian/security/README.txt
@@ -0,0 +1 @@
+Configure Debian security checks.
diff --git a/playbooks/roles/debian/security/tasks/main.yml b/playbooks/roles/debian/security/tasks/main.yml
new file mode 100644
index 0000000..d4a08cd
--- /dev/null
+++ b/playbooks/roles/debian/security/tasks/main.yml
@@ -0,0 +1,8 @@
+- name: Install chkrootkit and debsecan
+  become: true
+  apt:
+    cache_valid_time: 3600
+    install_recommends: no
+    name: ['chkrootkit', 'debsecan']
+    state: latest
+    update_cache: yes