Remove old kernels as part of common role and not via grsecurity role #4641
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This was initially done as part of the grsecurity role The removal must be done before installing holding tor, as if there are packages to be autoremoved, the tor hold talk will fail.
|
This PR works locally on my system using the latest |
|
Retriggering tests here - to test intake of newer GCP image |
3 tasks
|
|
msheiny
reviewed
Jul 25, 2019
| - apt | ||
|
|
||
| - name: Validate that all installed kernels are grsecurity-hardened. | ||
| assert: |
There was a problem hiding this comment.
@emkll i think this is fine for now but in the future this might have been easier/cleaner to just slap into a single grep command that exits 1 or 0
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Status
Ready for review
Description of Changes
Fixes #4637
Changes proposed in this pull request:
Testing
Deployment
This change only affects the Ansible logic on initial or subsequent installs
Checklist
If you made changes to the system configuration:
If you made non-trivial code changes: