sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

Lint update

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2025-02-20 11:55:59 +00:00
parent d6a560b2c8
commit 3441894ab4
No known key found for this signature in database
GPG key ID: 997FF7FE93AEB5B9
1 changed files with 2 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
defaults/main.yml
View file

@ -1211,7 +1211,7 @@ rhel9cis_remote_log_queuesize: 1000
## Control 6.2.3.8 rsyslog rotate ## Control 6.2.3.8 rsyslog rotate
# This variable configures whether to set your own rsyslog logrotate setting alternate to logrotate default settings # This variable configures whether to set your own rsyslog logrotate setting alternate to logrotate default settings
#Please refer to logrotate options to match your site requirements # Please refer to logrotate options to match your site requirements
# This sets when to rotate # This sets when to rotate
rhel9cis_rsyslog_logrotate_rotated_when: weekly rhel9cis_rsyslog_logrotate_rotated_when: weekly
# This sets how many rotations of the file to keep # This sets how many rotations of the file to keep
@ -1227,7 +1227,7 @@ rhel9cis_rsyslog_logrotate_notifempty: true
rhel9cis_rsyslog_logrotate_create: true rhel9cis_rsyslog_logrotate_create: true
# Extra options that can be added according to rsyslog documentation # Extra options that can be added according to rsyslog documentation
# Uncomment and add the required options e.g. mode owner group # Uncomment and add the required options e.g. mode owner group
#rhel9cis_rsyslog_logrotate_create_opts: # rhel9cis_rsyslog_logrotate_create_opts:
## Control 6.3.2.1 - Ensure audit_backlog_limit is sufficient ## Control 6.3.2.1 - Ensure audit_backlog_limit is sufficient
# This variable represents the audit backlog limit, i.e., the maximum number of audit records that the # This variable represents the audit backlog limit, i.e., the maximum number of audit records that the
@ -1326,7 +1326,6 @@ rhel9cis_suid_sgid_adjust: false
# Allow ansible to adjust world-writable files. False will just display world-writable files, True will remove world-writable. # Allow ansible to adjust world-writable files. False will just display world-writable files, True will remove world-writable.
rhel9cis_no_world_write_adjust: true rhel9cis_no_world_write_adjust: true
## Control 7.2.9 ## Control 7.2.9
# This allows ansible to alter the dot files as per rule if found # This allows ansible to alter the dot files as per rule if found
# When set to true this will align with benchmark - can impact a running system if not tested sufficiently # When set to true this will align with benchmark - can impact a running system if not tested sufficiently