sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

suditd improvements

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-06-20 17:06:56 +01:00
parent 1dd2b46be6
commit b934cbef3f
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB
2 changed files with 50 additions and 79 deletions
Download patch file Download diff file Expand all files Collapse all files

3
tasks/section_4/cis_4.1.2.x.yml
View file

@ -5,6 +5,7 @@
path: /etc/audit/auditd.conf
regexp: "^max_log_file( |=)"
line: "max_log_file = {{ rhel9cis_max_log_file_size }}"
register: rule_4_1_2_1
notify: restart auditd
when:
- rhel9cis_rule_4_1_2_1
@ -21,6 +22,7 @@
path: /etc/audit/auditd.conf
regexp: "^max_log_file_action"
line: "max_log_file_action = {{ rhel9cis_auditd['max_log_file_action'] }}"
register: rule_4_1_2_2
notify: restart auditd
when:
- rhel9cis_rule_4_1_2_2
@ -37,6 +39,7 @@
path: /etc/audit/auditd.conf
regexp: "{{ item.regexp }}"
line: "{{ item.line }}"
register: rule_4_1_2_3
notify: restart auditd
with_items:
- { regexp: '^admin_space_left_action', line: 'admin_space_left_action = {{ rhel9cis_auditd.admin_space_left_action }}' }