Merge pull request ComplianceAsCode#12786 from Mab879/fix_12766

Adjust ansible_audit_augenrules_add_syscall_rule to 600
alanmcanonical · Jan 14, 2025 · 0def38c · 0def38c
2 parents 5d21cf4 + 8f6ab94
commit 0def38c
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/shared/macros/10-ansible.jinja b/shared/macros/10-ansible.jinja
@@ -570,6 +570,7 @@ The macro requires following parameters:
     line: '\1\2\3{{ missing_syscalls | join("\3") }}\4'
     backrefs: yes
     state: present
+    mode: g-rwx,o-rwx
   when: syscalls_found | length > 0 and missing_syscalls | length > 0
 
 - name: Add the audit rule to {{ audit_file }}
@@ -647,6 +648,7 @@ The following macro remediates Audit syscall rule in :code:`/etc/audit/audit.rul
     line: '\1\2\3{{ missing_syscalls | join("\3") }}\4'
     backrefs: yes
     state: present
+    mode: g-rwx,o-rwx
   when: syscalls_found | length > 0 and missing_syscalls | length > 0
 
 - name: Add the audit rule to {{ audit_file }}