Fix broken mode for /var/log/audit (#552)

``` Unable to open /var/log/audit/audit.log (Permission denied) ``` This PR fixes the issue by using the default permission set by auditd (`0700`). Signed-off-by: Benedikt Böhm <[email protected]>
dev-sec · Jul 26, 2022 · 2265497 · 2265497
1 parent 24d3520
commit 2265497
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/roles/os_hardening/defaults/main.yml b/roles/os_hardening/defaults/main.yml
@@ -428,7 +428,7 @@ os_mnt_var_log_src: ""
 os_mnt_var_log_options: 'rw,nosuid,nodev,noexec'
 os_mnt_var_log_filesystem: "ext4"
 
-os_mnt_var_log_audit_dir_mode: '0640'
+os_mnt_var_log_audit_dir_mode: '0700'
 os_mnt_var_log_audit_enabled: false
 os_mnt_var_log_audit_src: ""
 os_mnt_var_log_audit_options: 'rw,nosuid,nodev,noexec'