eric/ansible-role-audita
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Finish the Audita remediation

Browse Source
This commit is contained in:
Eric Rakestraw
2026-09-08 04:41:31 +00:00
parent d37f590492
commit 3a8c21f0e6
3 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
README.md
View File

@@ -52,9 +52,12 @@ modes, executable behavior, and native configuration validation. It covers
missing-binary and checkout rebuilds, caller-supplied Go with dependency missing-binary and checkout rebuilds, caller-supplied Go with dependency
management disabled, metadata repair without rebuilding, configuration-only management disabled, metadata repair without rebuilding, configuration-only
convergence, and platform failures before isolated application state exists. convergence, and platform failures before isolated application state exists.
The suite mutates only `/usr/local/src/audita`, `/usr/local/bin/audita`, On a fresh host, default convergence may also install Git through APT, refresh
`/usr/local/etc/audita/config.yml`, and paths inside its private temporary the APT cache, and install the Go Snap. Application state is limited to
directory, then leaves the default release and configuration installed: `/usr/local/src/audita`, `/usr/local/bin/audita`, and
`/usr/local/etc/audita/config.yml`; temporary test-specific files remain inside
the suite's private temporary directory. The suite leaves the default release
and configuration installed:
```sh ```sh
tests/integration tests/integration

2
meta/main.yml
View File

@@ -4,7 +4,7 @@ galaxy_info:
namespace: rakestraw namespace: rakestraw
author: Eric Rakestraw author: Eric Rakestraw
description: Install and configure Audita from source description: Install and configure Audita from source
license: BSD-3-Clause license: CC0-1.0
min_ansible_version: "2.18" min_ansible_version: "2.18"
issue_tracker_url: https://gitea.maximumdirect.net/eric/ansible-role-audita/issues issue_tracker_url: https://gitea.maximumdirect.net/eric/ansible-role-audita/issues
platforms: platforms:

1
tests/verify.yml
View File

@@ -50,6 +50,7 @@
- name: Check binary metadata - name: Check binary metadata
ansible.builtin.assert: ansible.builtin.assert:
that: that:
- audita_binary_metadata.stat.isreg
- audita_binary_metadata.stat.pw_name == "root" - audita_binary_metadata.stat.pw_name == "root"
- audita_binary_metadata.stat.gr_name == "root" - audita_binary_metadata.stat.gr_name == "root"
- audita_binary_metadata.stat.mode == "0755" - audita_binary_metadata.stat.mode == "0755"