andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Parametrize more auditd.conf options (#535)

Browse Source 
* Parametrize more auditd.conf options

* Parametrize more auditd.conf options

* Add `os_auditd` options

* Add os_auditd_log_group

* Add os_auditd_log_group

Co-authored-by: Paweł Krawczyk <[email protected]>
Co-authored-by: Sebastian Gumprich <[email protected]>
This commit is contained in:
Paweł KrawczykPaweł KrawczykSebastian Gumprich
 authored and GitHub committed 2023-01-19 13:45:24 +01:00
1 parent ca25f50ba6
commit 88ef3cf3af
3 files changed
+42 -13
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

roles/os_hardening/defaults/main.yml
+9
View File
@@ -328,8 +328,17 @@ os_hardening_enabled: true
# Set to false to disable installing and configuring auditd.
os_auditd_enabled: true
os_auditd_flush: INCREMENTAL
os_auditd_max_log_file: 6
os_auditd_max_log_file_action: keep_logs
os_auditd_log_format: RAW
os_auditd_admin_space_left: 50
os_auditd_space_left: 75
os_auditd_space_left_action: SYSLOG
os_auditd_admin_space_left_action: SUSPEND
os_auditd_disk_full_action: SUSPEND
os_auditd_disk_error_action: SUSPEND
os_auditd_log_group: root
os_auditd_num_logs: 5
# Set the SELinux state, which can be either disabled, permissive, or enforcing.