Feat(debian/security): Configure Debian security checks

Install `chkrootkit` and `debsecan`.

diff --git a/playbooks/roles/debian/security/README.txt b/playbooks/roles/debian/security/README.txt
new file mode 100644 (file)
index 0000000..0e5f773
--- /dev/null
+++ b/playbooks/roles/debian/security/README.txt
@@ -0,0 +1 @@
+Configure Debian security checks.

diff --git a/playbooks/roles/debian/security/tasks/main.yml b/playbooks/roles/debian/security/tasks/main.yml
new file mode 100644 (file)
index 0000000..d4a08cd
--- /dev/null
+++ b/playbooks/roles/debian/security/tasks/main.yml
@@ -0,0 +1,8 @@
+- name: Install chkrootkit and debsecan
+  become: true
+  apt:
+    cache_valid_time: 3600
+    install_recommends: no
+    name: ['chkrootkit', 'debsecan']
+    state: latest
+    update_cache: yes