andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix broken mode for /var/log/audit (#552)

Browse Source 
```
Unable to open /var/log/audit/audit.log (Permission denied)
```

This PR fixes the issue by using the default permission set by auditd (`0700`).

Signed-off-by: Benedikt Böhm <[email protected]>
This commit is contained in:
Benedikt Böhm authored and GitHub committed 2022-07-26 15:57:39 +02:00
1 parent 24d3520d69
commit 2265497e75
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
roles/os_hardening/defaults/main.yml
+1 -1
View File
@@ -428,7 +428,7 @@ os_mnt_var_log_src: ""
os_mnt_var_log_options: 'rw,nosuid,nodev,noexec'
os_mnt_var_log_filesystem: "ext4"
os_mnt_var_log_audit_dir_mode: '0640'
os_mnt_var_log_audit_dir_mode: '0700'
os_mnt_var_log_audit_enabled: false
os_mnt_var_log_audit_src: ""
os_mnt_var_log_audit_options: 'rw,nosuid,nodev,noexec'