ansible-hardening/releasenotes/notes/package-state-present-951161faa5384abd.yaml
Major Hayden 8efb23599c Change package state to 'present'
This patch switches the package state for all packages installed
by the security role to `present`. This change should speed up
the run time of the security role and it avoids unexpected package
upgrades on systems that run the security role on a recurring basis.

Change-Id: I28bcc1c0ebf266909bbde554411f68fde0e64a58
2016-11-14 14:17:58 -06:00

8 lines
374 B
YAML

---
upgrade:
- The security role will accept the currently installed version of a package
rather than attempting to update it. This reduces unexpected changes on
the system from subsequent runs of the security role. Deployers can still
set ``security_package_state`` to ``latest`` to ensure that all packages
installed by the security role are up to date.