RHEL9-CIS/tasks/section_4/cis_4.3.yml

---

- name: "4.3.1 | PATCH | Ensure logrotate is installed"
  package:
      name: rsyslog-logrotate
      state: present
  when:
      - rhel9cis_rule_4_3_1
  tags:
      - level1-server
      - level1-workstation
      - manual
      - patch
      - logrotate
      - rule_4.3.1

- name: "4.3.2 | PATCH | Ensure logrotate is running and enabled"
  systemd:
      name: logrotate.timer
      state: started
      enabled: true
  when:
      - rhel9cis_rule_4_3_2
  tags:
      - level1-server
      - level1-workstation
      - manual
      - patch
      - logrotate
      - rule_4.3.2

- name: "4.3.3 | PATCH | Ensure logrotate is configured"
  block:
      - name: "4.3.3 | AUDIT | Ensure logrotate is configured | Get logrotate settings"
        find:
            paths: /etc/logrotate.d/
        register: log_rotates

      - name: "4.3.3 | PATCH | Ensure logrotate is configured"
        replace:
            path: "{{ item.path }}"
            regexp: '^(\s*)(daily|weekly|monthly|yearly)$'
            replace: "\\1{{ rhel9cis_logrotate }}"
        with_items:
            - "{{ log_rotates.files }}"
            - { path: "/etc/logrotate.conf" }
        loop_control:
            label: "{{ item.path }}"
  when:
      - rhel9cis_rule_4_3_3
  tags:
      - level1-server
      - level1-workstation
      - manual
      - patch
      - logrotate
      - rule_4.3.3