Run Lynis pre-hardening

pyllyukko · Dec 17, 2024 · cd27b01 · cd27b01
1 parent ca2e10e
commit cd27b01
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/banners.yml b/.github/workflows/banners.yml
@@ -28,6 +28,8 @@ jobs:
         uses: actions/checkout@v3
       - name: Install Lynis
         run: ansible-playbook -v harden.yml --tags lynis --skip-tags slackware,centos
+      - name: Run Lynis (pre-harden)
+        run: sudo lynis audit system --skip-plugins --tests-from-group authentication
       - name: Run Ansible playbook for passwords, pam & umask
         run: ansible-playbook harden.yml --tags passwords,pam,umask --skip-tags slackware,centos
       - name: Run Lynis