Debian Security

Overview

A role that provide some security tools for Debian.

deb_sec__required_packages : List of required packages [default : debsecan].
deb_sec__deploy_state : The desired state this role should achieve [default : present].
deb_sec__debsecan_report : If daily reports should be enable [default : true].
deb_sec__debsecan_suite : Suite name used to produce more informative output [default : {{ ansible_distribution_release }}].
deb_sec__debsecan_mailto : Mail address to which reports are sent [default : root].
deb_sec__debsecan_source : The URL from which vulnerability data is downloaded [default : ''].
deb_sec__debsecan_cron_disabled : If the Debsecan job should be disabled [default : false].
deb_sec__debsecan_cron_job : The command to execute for Debsecan cron [default : test -x /usr/bin/debsecan && /usr/bin/debsecan --cron].
deb_sec__debsecan_cron_special_time : Periodicity of the cron job for Debsecan [default : daily].
deb_sec__debsecan_cron_user : User whose run the job [default : daemon].

- hosts: my.debian.host
  roles:
    - role: ipr-cnrs.debian_security

This role will :

This source code comes from our Gogs instance and the Github repo exist just to be able to send the role to Ansible Galaxy…

But feel free to send issue/PR anywhere :)

Thanks to this hook, Github automatically got updates from our Gogs instance :)

Jérémy Gardais