openstack
/
openstack-ansible-security
Code Issues Proposed changes

Fix AppArmor dmesg grep task 

The task that checks for AppArmor being disabled at boot time
fails if the line isn't present in dmesg. This patch ensures that
the output from dmesg is always maintained and the shell always
comes back with success.

Closes-Bug: 1694508
Change-Id: Ied083e02855b2173d766c7cfd33045e737a79a43
This commit is contained in:
Major Hayden 2017-05-30 13:24:47 -05:00
parent 7eeddf0d11
commit 1f89531fb8
No known key found for this signature in database
GPG Key ID: 737051E0C1011FB1
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tasks/rhel7stig/lsm.yml
View File

@ -14,7 +14,7 @@
# limitations under the License.
- name: Check if AppArmor is disabled at boot time
shell: "dmesg | grep -i apparmor"
shell: "dmesg | grep -i apparmor || true"
register: dmesg_apparmor_output
changed_when: False
check_mode: no