boogiespook / malware-playbooks Goto Github PK

The yara package is now available from the regular RHEL repos (RHEL 8 at least) , and therefore there's no need to enable EPEL for this testing. I would be happy to change this via a PR if you find it helpful.

The playbook as provided needs to be run as the root user, which is not the ideal practice when running Ansible against a remote host. This could be resolved by adding the become: yes directive to the start of the playbook. I have tested this successfully and would happily submit a PR to fix the issue if desired.