Fix for ansible-lockdown#279

TeamSalvador · Apr 17, 2023 · e389d74 · e389d74
1 parent 77dc76d
commit e389d74
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/tasks/section_4/cis_4.2.2.x.yml b/tasks/section_4/cis_4.2.2.x.yml
@@ -106,8 +106,11 @@
 - name: "4.2.2.3 | PATCH | Ensure journald is configured to compress large log files"
   ansible.builtin.lineinfile:
       path: /etc/systemd/journald.conf
-      regexp: "^#Compress=|^Compress="
+      regexp: 'Compress='
       line: Compress=yes
+      state: present
+      insertafter: ^#Compress
+      validate: /usr/bin/bash -n %s
   when:
       - rhel8cis_rule_4_2_2_3
   tags: