ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-27 15:33:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Improving doc for journald log parameters.

Browse source 
Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
This commit is contained in:
Ionut Pruteanu 2024-01-19 15:37:44 +02:00
parent 8fc85fcc59
commit b4bef292ca
No known key found for this signature in database
GPG key ID: 95B7D43B702B3569
1 changed files with 11 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

22
defaults/main.yml
View file

@ -963,30 +963,30 @@ rhel9cis_journal_servercertificatefile: "/etc/ssl/certs/journal-upload.pem"
# of certificate authorities (CAs) that the client trusts. These trusted certificates are used # of certificate authorities (CAs) that the client trusts. These trusted certificates are used
# to validate the authenticity of the remote server's certificate. # to validate the authenticity of the remote server's certificate.
rhel9cis_journal_trustedcertificatefile: "/etc/ssl/ca/trusted.pem" rhel9cis_journal_trustedcertificatefile: "/etc/ssl/ca/trusted.pem"
# ATTENTION: Uncomment the keyword below when values are set!
## Control 4.2.2.6 - Ensure journald log rotation is configured per site policy
# Current variable configures the max amount of disk space the logs will use(thus, journal files
# will not grow without bounds)
# The variables below related to journald, please set these to your site specific values # The variables below related to journald, please set these to your site specific values
# These variable specifies how much disk space the journal may use up at most # These variable specifies how much disk space the journal may use up at most
# Specify values in bytes or use K, M, G, T, P, E as units for the specified sizes. # Specify values in bytes or use K, M, G, T, P, E as units for the specified sizes.
# See https://www.freedesktop.org/software/systemd/man/journald.conf.html for more information. # See https://www.freedesktop.org/software/systemd/man/journald.conf.html for more information.
# ATTENTION: Uncomment the keyword below when values are set!
## Control 4.2.2.6 - Ensure journald log rotation is configured per site policy
# 'rhel9cis_journald_systemmaxuse' is the max amount of disk space the logs will use
rhel9cis_journald_systemmaxuse: 10M rhel9cis_journald_systemmaxuse: 10M
## Control 4.2.2.6 - Ensure journald log rotation is configured per site policy ## Control 4.2.2.6 - Ensure journald log rotation is configured per site policy
# 'rhel9cis_journald_systemkeepfree' is the amount of disk space to keep free # Current variable configures the amount of disk space to keep free for other uses.
rhel9cis_journald_systemkeepfree: 100G rhel9cis_journald_systemkeepfree: 100G
## Control 4.2.2.6 - Ensure journald log rotation is configured per site policy ## Control 4.2.2.6 - Ensure journald log rotation is configured per site policy
# 'rhel9cis_journald_runtimemaxuse' control how much disk space the journal may use up at most. # This variable configures how much disk space the journal may use up at most.
# same as 'rhel9cis_journald_systemmaxuse'. # Similar with 'rhel9cis_journald_systemmaxuse', but related to runtime space.
rhel9cis_journald_runtimemaxuse: 10M rhel9cis_journald_runtimemaxuse: 10M
## Control 4.2.2.6 - Ensure journald log rotation is configured per site policy ## Control 4.2.2.6 - Ensure journald log rotation is configured per site policy
# 'rhel9cis_journald_runtimekeepfree' is the amount of disk space to keep free # This variable configures the actual amount of disk space to keep free
# same as 'rhel9cis_journald_systemkeepfree', but related to runtime space. # Similar with 'rhel9cis_journald_systemkeepfree', but related to runtime space.
rhel9cis_journald_runtimekeepfree: 100G rhel9cis_journald_runtimekeepfree: 100G
## Control 4.2.2.6 - Ensure journald log rotation is configured per site policy ## Control 4.2.2.6 - Ensure journald log rotation is configured per site policy
# 'rhel9cis_journald_MaxFileSec' is how long in time to keep log files. # Current variable governs the settings for log retention(how long the log files will be kept).
# This variable specifies, the maximum time to store entries in a single journal # Thus, it specifies the maximum time to store entries in a single journal
# file before rotating to the next one. Set to 0 to turn off this feature. # file before rotating to the next one. Set to 0 to turn off this feature.
# The given values is interpreted as seconds, unless suffixed with the units # The given values is interpreted as seconds, unless suffixed with the units
# `year`, `month`, `week`, `day`, `h` or `m` to override the default time unit of seconds. # `year`, `month`, `week`, `day`, `h` or `m` to override the default time unit of seconds.