Files
ansible-collection-hardening/roles/os_hardening/tasks/auditd.yml
T
Dennis Lerch 6bcdb253ec auditd: add possibility to override config template (#685)
* make template overrideable

by referencing the auditd.conf.j2 template, a custom template can be provided to the role.

Signed-off-by: Dennis Lerch <[email protected]>

* extend auditd config

make freq and log_file configurable
implement write_logs with it's default value in order to be able to disable log writing

Signed-off-by: Dennis Lerch <[email protected]>

* Extend README.md documentation by new variables

reorder `os_auditd_log_format` to keep sequence from defaults

Signed-off-by: Dennis Lerch <[email protected]>

---------

Signed-off-by: Dennis Lerch <[email protected]>
2023-07-24 11:34:47 +02:00

17 lines
367 B
YAML

---
- name: Install auditd package | package-08
ansible.builtin.package:
name: "{{ auditd_package }}"
state: present
tags: auditd
- name: Configure auditd | package-08
ansible.builtin.template:
src: "{{ os_auditd_template }}"
dest: /etc/audit/auditd.conf
owner: root
group: root
mode: "0640"
notify: Restart auditd
tags: auditd