mirror of
https://github.com/rocky-linux/infrastructure
synced 2024-11-01 04:31:22 +00:00
fcdf86b31c
This commit appends the README.md to state that yaml files should start with `---` and end with `...`. This also addresses some linting warnings that were not appearing during pre-commit on local system.
37 lines
686 B
YAML
37 lines
686 B
YAML
---
|
|
- name: Ensure auditd is installed
|
|
package:
|
|
name: audit
|
|
state: present
|
|
tags:
|
|
- harden
|
|
|
|
- name: Ensure auditd is enabled
|
|
service:
|
|
name: auditd
|
|
enabled: true
|
|
|
|
- name: Ensure auditd buffer is OK
|
|
replace:
|
|
path: /etc/audit/rules.d/audit.rules
|
|
regexp: '-b \d+'
|
|
replace: '-b {{ audit_buffer }}'
|
|
notify:
|
|
- regenerate_auditd_rules
|
|
tags:
|
|
- harden
|
|
|
|
- name: Ensure collection audit rules are available
|
|
template:
|
|
src: "etc/audit/rules.d/collection.rules.j2"
|
|
dest: "/etc/audit/rules.d/collection.rules"
|
|
owner: root
|
|
group: root
|
|
mode: '0600'
|
|
backup: true
|
|
notify:
|
|
- regenerate_auditd_rules
|
|
tags:
|
|
- harden
|
|
...
|