afmarulanda/wazuh-ansible-4.8.1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #56 from pillarsdotnet/optional-checks

Browse Source 
Make rootcheck and syscheck optional.
This commit is contained in:
José Luis Ruiz 2018-08-21 17:42:51 -04:00 committed by GitHub
commit dc6de25890
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2
View File

@ -39,6 +39,7 @@
<disabled>no</disabled> <disabled>no</disabled>
</active-response> </active-response>
{% if wazuh_agent_config.rootcheck is defined %}
<rootcheck> <rootcheck>
<disabled>no</disabled> <disabled>no</disabled>
<check_unixaudit>yes</check_unixaudit> <check_unixaudit>yes</check_unixaudit>
@ -71,7 +72,9 @@
<skip_nfs>yes</skip_nfs> <skip_nfs>yes</skip_nfs>
</rootcheck> </rootcheck>
{% endif %}
{% if wazuh_agent_config.syscheck is defined %}
<syscheck> <syscheck>
<disabled>no</disabled> <disabled>no</disabled>
{% if ansible_os_family == "Windows" %} {% if ansible_os_family == "Windows" %}
@ -117,6 +120,7 @@
{% endfor %} {% endfor %}
{% endif %} {% endif %}
</syscheck> </syscheck>
{% endif %}
{% if ansible_system == "Linux" and wazuh_agent_config.openscap.disable == 'no' %} {% if ansible_system == "Linux" and wazuh_agent_config.openscap.disable == 'no' %}
<wodle name="open-scap"> <wodle name="open-scap">