Ensure mode for audit files is audit in ansible_audit_auditctl_add_sy…

…scall_rule
ComplianceAsCode · Jan 10, 2025 · 8f6ab94 · 8f6ab94
1 parent 3b057a4
commit 8f6ab94
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/shared/macros/10-ansible.jinja b/shared/macros/10-ansible.jinja
@@ -648,6 +648,7 @@ The following macro remediates Audit syscall rule in :code:`/etc/audit/audit.rul
     line: '\1\2\3{{ missing_syscalls | join("\3") }}\4'
     backrefs: yes
     state: present
+    mode: g-rwx,o-rwx
   when: syscalls_found | length > 0 and missing_syscalls | length > 0
 
 - name: Add the audit rule to {{ audit_file }}