diff --git a/roles/security/tasks/main.yml b/roles/security/tasks/main.yml index 4289ad1f..2f279122 100644 --- a/roles/security/tasks/main.yml +++ b/roles/security/tasks/main.yml @@ -56,13 +56,6 @@ group: root mode: 0750 - - name: Collect Use of privileged commands - shell: > - /usr/bin/find {/usr/local/sbin,/usr/local/bin,/sbin,/bin,/usr/sbin,/usr/bin} -xdev \( -perm -4000 -o -perm -2000 \) -type f | awk '{print "-a always,exit -F path=" $1 " -F perm=x -F auid>=500 -F auid!=4294967295 -k privileged" }' - args: - executable: /bin/bash - register: privileged_programs - # Core dumps - name: Restrict core dumps (with PAM)