Merge branch 'devel' of https://github.com/brisky/RHEL9-CIS into devel

defaults/main.yml

@@ -523,7 +523,8 @@ rhel9cis_auditd_extra_conf: {}
 ## Preferred method of logging
 ## Whether rsyslog or journald preferred method for local logging
 ## Affects rsyslog cis 4.2.1.3 and journald cis 4.2.2.5
-rhel9cis_syslog: rsyslog
+#rhel9cis_syslog: rsyslog
+rhel9cis_syslog: journald
 rhel9cis_rsyslog_ansiblemanaged: true
 
 #### 4.2.1.6 remote and destation log server name
@@ -536,6 +537,7 @@ rhel9cis_remote_log_queuesize: 1000
 
 #### 4.2.1.7
 rhel9cis_system_is_log_server: false
+#rhel9cis_system_is_log_server: true
 
 # 4.2.2.1.2
 # rhel9cis_journal_upload_url is the ip address to upload the journal entries to

tasks/section_3/cis_3.3.x.yml

@@ -145,6 +145,11 @@
       - name: "3.3.7 | PATCH | Ensure Reverse Path Filtering is enabled"
         ansible.builtin.debug:
             msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/60-netipv4_sysctl.conf"
+
+      - name: "3.3.7 | PATCH | Ensure Reverse Path Filtering is enabled in "
+        ansible.builtin.debug:
+            msg: "Control being set via Handler 'update sysctl' which writes to /etc/sysctl.d/60-netipv4_sysctl.conf"
+      
   when:
       - rhel9cis_rule_3_3_7
   tags:

tasks/section_4/cis_4.2.1.x.yml

@@ -214,3 +214,4 @@
       - patch
       - rsyslog
       - rule_4.2.1.7
+

templates/etc/systemd/journald.conf.j2

@@ -0,0 +1,7 @@
+# journald configure.
+
+{% if rhel9cis_rule_4_2_2_3 %}
+# CIS 4.2.2.3/4
+Compress=yes
+Storage=persistent 
+{% endif %}