ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-24 22:23:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

updated

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-07-26 11:13:29 +01:00
parent 69f453902f
commit 5ba2c41851
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB
2 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
Changelog.md
View file

@ -1,5 +1,13 @@
# Changes to rhel9CIS
## 0.4
- RockyLinux now supported
- workflow updates
- selinux regexp improvements
- warning summary now at end of play
- advanced auditd options to exclude users in POST section
## 0.3
- update to auditd template

3
defaults/main.yml
View file

@ -505,6 +505,9 @@ rhel9cis_max_log_file_size: 10
### 4.1.3.x audit template
update_audit_template: false
## Advanced option found in auditd post
allow_auditd_uid_user_exclusions: false
## Preferred method of logging
## Whether rsyslog or journald preferred method for local logging
## Affects rsyslog cis 4.2.1.3 and journald cis 4.2.2.5