-
Notifications
You must be signed in to change notification settings - Fork 4
Description
I noticed that the Update AIDE database and fetch it block generates a new aide DB and fetches it, but I would expect the aide_update action to also replace the existing database. Otherwise future check operations run without ansible (e.g. a cron) will not use the new database. The Copy AIDE reference database task could be duplicated to overwrite the existing database. This issue can be mitigated by running the role with aide_check after the update.
Thinking through this a bit, since the update task will fail if the DB is different, does the --update action really do anything meaningful? As a user, the only time I want to run --update is when I know it has changed. if the database hasn't changed, does it really need to be updated?
Perhaps the failed_when criteria should be used for changed_when instead.