Skip to main content

AUDIT.YML

 ---
- name: Update auditd.conf and restart auditd service
  hosts: all
  become: yes
  tasks:

    - name: Ensure the line 'disk_full_action = halt' exists in auditd.conf
      lineinfile:
        path: /etc/audit/auditd.conf
        regexp: '^disk_full_action'
        line: 'disk_full_action = halt'
        state: present
      register: disk_full_action_changed

    - name: Ensure the line 'disk_error_action = halt' exists in auditd.conf
      lineinfile:
        path: /etc/audit/auditd.conf
        regexp: '^disk_error_action'
        line: 'disk_error_action = halt'
        state: present
      register: disk_error_action_changed

    - name: Restart the auditd service
      service:
        name: auditd
        state: restarted
      when: disk_full_action_changed.changed or disk_error_action_changed.changed

Comments

Post a Comment

Popular posts from this blog

Veritas cluster Interview Questions-2

Please go through questions and answers. Let me know if you have any doubt by leaving comment. Adding and removing cluster node  Q-1 How to add a node in an existing cluster? Ans:    Adding a node into an existing cluster is a multi steps process. 1:       Set up the hardware Before adding a node to an existing cluster, node must be physically connected with the cluster.       1: Connect the VCS private Ethernet controllers       2: Connect the node to the shared storage 2:       Install the VCS software in the node           Install the VCS software and install the license. 3:       Configure LLT and GAB Create the LLT & GAB configuration files (/etc/llthosts, /etc/llttab and /etc/gabtab) in the new node and update the files on the existing node. 4:       Add the node to an existing cluster We have to perform below given tasks in any of the exi...
Post a Comment
Read more

Learning - AWS

Service Health Check  -------------- http://status.aws.amazon.com Region - Geographocal identify Region comprises of AV Zones AV Zone - AV zone comprises of physical infra (like DC, Network, Power, Physcial SErver, Stroage etc..) --------------------------- VPC - Virtual Private Cloud  - logically isolated on your network. Earlier : EC2-Classic - Comes with one single FLAT  N/W --------------- S3 - Simple Storage Service (ALL AMI  and Snapshot are Stored in S3 bucket )  EBS - Elastic Block Store - ( Where VOLUMES/Virtual Storage is created )  ( Root device type: ebs ) Virtualization type : hvm ( Hardware virutalization method ) Old method - Virtualization type : paravirtual. (  Instance Type -------------------------- General Purpose Compute Optimized GPU Instance Memory Optimized Storage Optimized -------------- A security group is a set of firewall rules that control the traffic for your instance.  you can add rules to allow specific traffic to ...
Post a Comment
Read more