Skip to content

aide_update should also replace the database #46

@bparry02

Description

@bparry02

I noticed that the Update AIDE database and fetch it block generates a new aide DB and fetches it, but I would expect the aide_update action to also replace the existing database. Otherwise future check operations run without ansible (e.g. a cron) will not use the new database. The Copy AIDE reference database task could be duplicated to overwrite the existing database. This issue can be mitigated by running the role with aide_check after the update.

Thinking through this a bit, since the update task will fail if the DB is different, does the --update action really do anything meaningful? As a user, the only time I want to run --update is when I know it has changed. if the database hasn't changed, does it really need to be updated?

Perhaps the failed_when criteria should be used for changed_when instead.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions