Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

use ubtu20cis_auditd[admin_space_left_action] #142

Merged
merged 1 commit into from
Mar 25, 2024
Merged

use ubtu20cis_auditd[admin_space_left_action] #142

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 4 additions & 3 deletions defaults/main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -727,15 +727,16 @@ ubtu20cis_remote_log_server: 192.168.2.100
ubtu20cis_audit_back_log_limit: 8192

# ubtu20cis_max_log_file_size is largest the log file will become in MB
# This shoudl be set based on your sites policy
# This should be set based on your sites policy
ubtu20cis_max_log_file_size: 10

#
# ubtu20cis_auditd sets actions for admin_space_left_action and max_log_file_action
# CIS allows admin_space_left_action of "halt" or "single"
ubtu20cis_auditd:
admin_space_left_action: halt
max_log_file_action: keep_logs

# ubtu20cis_logrotate is the log rotate frequencey. Options are daily, weekly, monthly, and yearly
# ubtu20cis_logrotate is the log rotate frequency. Options are daily, weekly, monthly, and yearly
ubtu20cis_logrotate: "daily"

# Control 4.3
Expand Down
2 changes: 1 addition & 1 deletion tasks/section_5/cis_5.2.2.x.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@
with_items:
- { regexp: '^space_left_action', line: 'space_left_action = email' }
- { regexp: '^action_mail_acct', line: 'action_mail_acct = root' }
- { regexp: '^admin_space_left_action', line: 'admin_space_left_action = halt' }
- { regexp: '^admin_space_left_action', line: "admin_space_left_action = {{ ubtu20cis_auditd['admin_space_left_action'] }}" }
notify: restart auditd
when:
- ubtu20cis_rule_5_2_2_3
Expand Down