From 2a421fcea6933f70a2259182f8aba2447d693ad6 Mon Sep 17 00:00:00 2001
From: Mark Bolwell <mark.bollyuk@gmail.com>
Date: Mon, 11 Apr 2022 17:39:13 +0100
Subject: [PATCH] logrotate changes reflected

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
---
 tasks/section_4/cis_4.3.yml | 39 ++++++++++++++++++++++++++++++++-----
 1 file changed, 34 insertions(+), 5 deletions(-)

diff --git a/tasks/section_4/cis_4.3.yml b/tasks/section_4/cis_4.3.yml
index e8a4780..f82dc9e 100644
--- a/tasks/section_4/cis_4.3.yml
+++ b/tasks/section_4/cis_4.3.yml
@@ -1,13 +1,42 @@
 ---
 
-- name: "4.3 | PATCH | Ensure logrotate is configured"
+- name: "4.3.1 | PATCH | Ensure logrotate is installed"
+  package:
+    name: rsyslog-logrotate
+    state: present
+  when:
+      - rhel9cis_rule_4_3_1
+  tags:
+      - level1-server
+      - level1-workstation
+      - manual
+      - patch
+      - logrotate
+      - rule_4.3.1
+
+- name: "4.3.2 | PATCH | Ensure logrotate is running and enabled"
+  systemd:
+    name: rsyslog-logrotate
+    state: started
+    enabled: true
+  when:
+      - rhel9cis_rule_4_3_2
+  tags:
+      - level1-server
+      - level1-workstation
+      - manual
+      - patch
+      - logrotate
+      - rule_4.3.2
+
+- name: "4.3.3 | PATCH | Ensure logrotate is configured"
   block:
-      - name: "4.3 | AUDIT | Ensure logrotate is configured | Get logrotate settings"
+      - name: "4.3.3 | AUDIT | Ensure logrotate is configured | Get logrotate settings"
         find:
             paths: /etc/logrotate.d/
         register: log_rotates
 
-      - name: "4.3 | PATCH | Ensure logrotate is configured"
+      - name: "4.3.3 | PATCH | Ensure logrotate is configured"
         replace:
             path: "{{ item.path }}"
             regexp: '^(\s*)(daily|weekly|monthly|yearly)$'
@@ -18,11 +47,11 @@
         loop_control:
             label: "{{ item.path }}"
   when:
-      - rhel9cis_rule_4_3
+      - rhel9cis_rule_4_3_3
   tags:
       - level1-server
       - level1-workstation
       - manual
       - patch
       - logrotate
-      - rule_4.3
+      - rule_4.3.3