34 lines
949 B
YAML
34 lines
949 B
YAML
---
|
|
## manage install when some directories are immutable
|
|
## requires target_dir, state=pre/post
|
|
|
|
- name: Check if system configured with immutable handled - juju4.harden
|
|
stat:
|
|
path: /etc/apt/apt.conf.d/99security
|
|
register: imm
|
|
|
|
- block:
|
|
## Ansible 2.3+ for get_attributes
|
|
- name: check target_dir {{ target_dir }} attributes
|
|
# stat:
|
|
# path: "{{ target_dir }}"
|
|
# get_attributes: yes
|
|
command: "lsattr -d '{{ target_dir }}'"
|
|
register: dir
|
|
changed_when: false
|
|
ignore_errors: true
|
|
|
|
- name: Remove immutable attribute
|
|
command: "chattr -i '{{ target_dir }}'"
|
|
ignore_errors: true
|
|
when: dir.stdout.find('-i-') != -1
|
|
when: state == 'pre' and imm.stat.exists
|
|
|
|
- name: Reestablish immutable attribute
|
|
command: "chattr +i '{{ target_dir }}'"
|
|
# file:
|
|
# dest: "{{ target_dir }}"
|
|
# attributes: '----i-----I--e--'
|
|
when: state == 'post' and imm.stat.exists
|
|
ignore_errors: true
|