|
 |
76240a |
From 5d4726bb609f463956c03909891f8fbd1975d222 Mon Sep 17 00:00:00 2001
|
|
|
76240a |
From: Milan Lysonek <mlysonek@redhat.com>
|
|
|
76240a |
Date: Mon, 9 Aug 2021 14:00:19 +0200
|
|
|
76240a |
Subject: [PATCH] Add missing ansible remediation metadata
|
|
|
76240a |
|
|
|
76240a |
---
|
|
|
76240a |
.../auditd_overflow_action/ansible/shared.yml | 4 ++++
|
|
|
76240a |
.../ansible/shared.yml | 4 ++++
|
|
|
76240a |
.../ansible/shared.yml | 4 ++++
|
|
|
76240a |
3 files changed, 12 insertions(+)
|
|
|
76240a |
|
|
|
76240a |
diff --git a/linux_os/guide/system/auditing/configure_auditd_data_retention/auditd_overflow_action/ansible/shared.yml b/linux_os/guide/system/auditing/configure_auditd_data_retention/auditd_overflow_action/ansible/shared.yml
|
|
|
76240a |
index 166054a95a..e1569b2254 100644
|
|
|
76240a |
--- a/linux_os/guide/system/auditing/configure_auditd_data_retention/auditd_overflow_action/ansible/shared.yml
|
|
|
76240a |
+++ b/linux_os/guide/system/auditing/configure_auditd_data_retention/auditd_overflow_action/ansible/shared.yml
|
|
|
76240a |
@@ -1,4 +1,8 @@
|
|
|
76240a |
# platform = multi_platform_fedora,multi_platform_rhel
|
|
|
76240a |
+# reboot = false
|
|
|
76240a |
+# strategy = restrict
|
|
|
76240a |
+# complexity = low
|
|
|
76240a |
+# disruption = low
|
|
|
76240a |
|
|
|
76240a |
{{{ ansible_set_config_file(file="/etc/audit/auditd.conf",
|
|
|
76240a |
parameter="overflow_action",
|
|
|
76240a |
diff --git a/linux_os/guide/system/logging/ensure_rsyslog_log_file_configuration/rsyslog_encrypt_offload_actionsendstreamdrivermode/ansible/shared.yml b/linux_os/guide/system/logging/ensure_rsyslog_log_file_configuration/rsyslog_encrypt_offload_actionsendstreamdrivermode/ansible/shared.yml
|
|
|
76240a |
index 2d6c5227a8..bbd27a0061 100644
|
|
|
76240a |
--- a/linux_os/guide/system/logging/ensure_rsyslog_log_file_configuration/rsyslog_encrypt_offload_actionsendstreamdrivermode/ansible/shared.yml
|
|
|
76240a |
+++ b/linux_os/guide/system/logging/ensure_rsyslog_log_file_configuration/rsyslog_encrypt_offload_actionsendstreamdrivermode/ansible/shared.yml
|
|
|
76240a |
@@ -1,4 +1,8 @@
|
|
|
76240a |
# platform = Red Hat Enterprise Linux 8,multi_platform_fedora
|
|
|
76240a |
+# reboot = false
|
|
|
76240a |
+# strategy = configure
|
|
|
76240a |
+# complexity = low
|
|
|
76240a |
+# disruption = low
|
|
|
76240a |
|
|
|
76240a |
{{{ ansible_set_config_file(file="/etc/rsyslog.d/encrypt.conf",
|
|
|
76240a |
parameter="\$ActionSendStreamDriverMode", value="1", create=true, separator=" ", separator_regex=" ")
|
|
|
76240a |
diff --git a/linux_os/guide/system/logging/ensure_rsyslog_log_file_configuration/rsyslog_encrypt_offload_defaultnetstreamdriver/ansible/shared.yml b/linux_os/guide/system/logging/ensure_rsyslog_log_file_configuration/rsyslog_encrypt_offload_defaultnetstreamdriver/ansible/shared.yml
|
|
|
76240a |
index 2ddbfb871f..b215daaef4 100644
|
|
|
76240a |
--- a/linux_os/guide/system/logging/ensure_rsyslog_log_file_configuration/rsyslog_encrypt_offload_defaultnetstreamdriver/ansible/shared.yml
|
|
|
76240a |
+++ b/linux_os/guide/system/logging/ensure_rsyslog_log_file_configuration/rsyslog_encrypt_offload_defaultnetstreamdriver/ansible/shared.yml
|
|
|
76240a |
@@ -1,4 +1,8 @@
|
|
|
76240a |
# platform = Red Hat Enterprise Linux 8,multi_platform_fedora
|
|
|
76240a |
+# reboot = false
|
|
|
76240a |
+# strategy = configure
|
|
|
76240a |
+# complexity = low
|
|
|
76240a |
+# disruption = low
|
|
|
76240a |
|
|
|
76240a |
{{{ ansible_set_config_file(file="/etc/rsyslog.d/encrypt.conf",
|
|
|
76240a |
parameter="\$DefaultNetstreamDriver", value="gtls", create=true, separator=" ", separator_regex=" ")
|