sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

updated

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-07-26 11:13:29 +01:00
parent 69f453902f
commit 5ba2c41851
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB
2 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
Changelog.md
View file

@ -1,5 +1,13 @@
# Changes to rhel9CIS # Changes to rhel9CIS
## 0.4
- RockyLinux now supported
- workflow updates
- selinux regexp improvements
- warning summary now at end of play
- advanced auditd options to exclude users in POST section
## 0.3 ## 0.3
- update to auditd template - update to auditd template

3
defaults/main.yml
View file

@ -505,6 +505,9 @@ rhel9cis_max_log_file_size: 10
### 4.1.3.x audit template ### 4.1.3.x audit template
update_audit_template: false update_audit_template: false
## Advanced option found in auditd post
allow_auditd_uid_user_exclusions: false
## Preferred method of logging ## Preferred method of logging
## Whether rsyslog or journald preferred method for local logging ## Whether rsyslog or journald preferred method for local logging
## Affects rsyslog cis 4.2.1.3 and journald cis 4.2.2.5 ## Affects rsyslog cis 4.2.1.3 and journald cis 4.2.2.5