ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-26 15:13:05 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

improvments v2

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2024-08-07 10:30:08 +01:00
parent 0fc418a222
commit 4f566974c9
No known key found for this signature in database
GPG key ID: 997FF7FE93AEB5B9
15 changed files with 110 additions and 58 deletions
Download patch file Download diff file Expand all files Collapse all files

4
templates/etc/systemd/journald.conf.d/forwardtosyslog.conf.j2 Normal file
View file

@ -0,0 +1,4 @@
# File created for CIS benchmark
# CIS rule 6_2_2_2
[Journal]
ForwardToSyslog=no

8
templates/etc/systemd/journald.conf.d/rotation.conf.j2 Normal file
View file

@ -0,0 +1,8 @@
# File created for CIS benchmark
# CIS rule 6_2_1_3
[Journal]
SystemMaxUse={{ rhel9cis_journald_systemmaxuse }}
SystemKeepFree={{ rhel9cis_journald_systemkeepfree }}
RuntimeMaxUse={{ rhel9cis_journald_runtimemaxuse }}
RuntimeKeepFree={{ rhel9cis_journald_runtimekeepfree }}
MaxFileSec={{ rhel9cis_journald_maxfilesec }}

11
templates/etc/systemd/journald.conf.d/storage.conf.j2 Normal file
View file

@ -0,0 +1,11 @@
# File created for CIS benchmark
[Journal]
{% if rhel9cis_rule_6_2_2_3 %}
# Set compress CIS rule 6_2_2_3
Compress=yes
{% endif %}
{% if rhel9cis_rule_6_2_2_4 %}
# Set persistent storage CIS rule 6_2_2_4
Storage=persistent
{% endif %}