Major Hayden 00ad8d3b57 Fix auditd log permission bug ...

The tasks for handling auditd log permissions incorrectly set all
log files in /var/log/audit to 0400, which prevents auditd from
writing to the active log file. This prevents auditd from starting and
restarting.

The task now removes any permissions explicitly disallowed by
V-38498. Any files meeting/exceeding the STIG requirements will not be
modified.

This is a manual backport of I1bb2b91ae8a78b1f0304bd4ce0f9a774d65245bd
from master.

Closes-bug: 1584942

Change-Id: I1bb2b91ae8a78b1f0304bd4ce0f9a774d65245bd

2016-05-25 14:22:48 +00:00

..

apt.yml

Check mode compatibility for security role

2015-12-02 20:50:33 +00:00

auditd.yml

Fix auditd log permission bug

2016-05-25 14:22:48 +00:00

auth.yml

Switch from dict to individual variables

2016-05-06 15:48:06 +00:00

boot.yml

Security: Check for grub.cfg first

2016-02-29 14:15:29 -06:00

console.yml

Enable role testing and make structure ansible-galaxy compatible

2015-10-09 11:47:23 +00:00

file_perms.yml

V-3864{2,5,7,9}, V-38651: Umask adjustments

2015-10-27 09:09:23 -05:00

kernel.yml

Switch from dict to individual variables

2016-05-06 15:48:06 +00:00

mail.yml

Fix Postfix mynetworks if IPv6 is disabled

2016-02-03 09:39:36 -06:00

main.yml

Check mode compatibility for security role

2015-12-02 20:50:33 +00:00

misc.yml

Fixing testing bug

2015-12-07 15:18:29 -06:00

nfsd.yml

Replace debug with fail

2015-10-14 14:29:07 -05:00

services.yml

Switch from dict to individual variables

2016-05-06 15:48:06 +00:00

sshd.yml

Handle Match properly in sshd_config

2016-05-16 14:09:57 +00:00