# platform = multi_platform_all
# reboot = false
# complexity = low
# strategy = configure
# disruption = low
- name: Gather the package facts
  package_facts:
    manager: auto
  tags:
  - configure_strategy
  - low_complexity
  - low_disruption
  - medium_severity
  - no_reboot_needed
  - usbguard_allow_hub

- name: Allow hubs
  ansible.builtin.lineinfile:
    path: /etc/usbguard/rules.conf
    create: true
    regexp: ''
    line: allow with-interface match-all { 09:00:* }
    state: present
  when: ( ansible_architecture != "s390x" and "linux-base" in ansible_facts.packages
    )
  tags:
  - configure_strategy
  - low_complexity
  - low_disruption
  - medium_severity
  - no_reboot_needed
  - usbguard_allow_hub
