openstack
/
openstack-ansible-security
Code Issues Proposed changes

Merge "Fix issues from new CentOS 7 release" into stable/newton

This commit is contained in:
Jenkins 2016-12-20 16:07:27 +00:00 committed by Gerrit Code Review
parent bf463a0ec5 2d07959b75
commit 57c00eb884
2 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tasks/auditd.yml
View File

@ -100,7 +100,7 @@
- V-38637
- name: Check audit package contents for alterations with rpm (for V-38637)
shell: "rpmverify audit audit-libs | grep -v '\\.conf$' | wc -l"
shell: "rpmverify audit audit-libs | egrep -v '/(etc|var)' | wc -l"
register: v38637_result
changed_when: False
when: ansible_pkg_mgr == 'yum'

8
tests/test.yml
View File

@ -64,5 +64,9 @@
roles:
- role: "openstack-ansible-security"
vars:
security_unattended_upgrades_enabled: true
security_unattended_upgrades_notifications: true
# NOTE(mhayden): yum-cron has a bug upon update due to a RPM conflict in
# the yum-cron.conf file. This test should be re-enabled when the
# OpenStack CI images are updated.
# See https://bugzilla.redhat.com/show_bug.cgi?id=1293513
security_unattended_upgrades_enabled: "{{ (ansible_os_family | lower == 'debian') | ternary(true, false) }}"
security_unattended_upgrades_notifications: "{{ (ansible_os_family | lower == 'debian') | ternary(true, false) }}"