Skip to main content

Posts

Showing posts from 2025

AUDIT.YML

 --- - name: Update auditd.conf and restart auditd service   hosts: all   become: yes   tasks:     - name: Ensure the line 'disk_full_action = halt' exists in auditd.conf       lineinfile:         path: /etc/audit/auditd.conf         regexp: '^disk_full_action'         line: 'disk_full_action = halt'         state: present       register: disk_full_action_changed     - name: Ensure the line 'disk_error_action = halt' exists in auditd.conf       lineinfile:         path: /etc/audit/auditd.conf         regexp: '^disk_error_action'         line: 'disk_error_action = halt'         state: prese...