Skip to content

Commit

Permalink
Add Ansible remediation for directory_ownership_var_log_audit
Browse files Browse the repository at this point in the history
  • Loading branch information
Mab879 committed Aug 22, 2023
1 parent 2ea9497 commit 2e0d83d
Showing 1 changed file with 11 additions and 0 deletions.
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
# platform = multi_platform_all

- name: '{{{ rule_title }}} - Register Audit Config'
ansible.builtin.slurp:
src: /etc/audit/auditd.conf
register: auditd_config
q
- name: '{{{ rule_title }}} - Set Permissions'
ansible.builtin.file:
owner: root
path: "{{ auditd_config['content'] | b64decode | regex_findall('^log_file = (.+)') | first | default('/var/log/audit') }}"

0 comments on commit 2e0d83d

Please sign in to comment.