Role Name

=========

Ansible role to install Lynis on Ubuntu and set up the server to follow Lynis audit standards.

Role Variables

rat - This variable helps determine if the server is secure enough. After Lynis runs, it gives a score called a "hardened rating." If this rating is higher than the set rat value, it will be a failure. For example, if the rating is 70 and rat is set to 80, it will fail. If the rating is 70 and rat is set to 60, it will succeed.

rkpause - This is the waiting time in minutes for rkhunter to finish before checking its log file. This pause is necessary because of a known issue in GitHub actions. The default waiting time is 10 minutes.

The default value for rat is 70.

- hosts: servers
  roles: 
    - Cac-Lynis
  vars:
    rat: 60

License

BSD

References

Lynis - Link

Author Information

Raman Sailopal