diff --git a/tasks/auditd.yml b/tasks/auditd.yml index ec6b38b..d025533 100644 --- a/tasks/auditd.yml +++ b/tasks/auditd.yml @@ -2,17 +2,10 @@ # Since auditd rules are dependent on syscalls and syscall tables are architecture specific, # we need to update the auditd rules depending on the architecture of the system. # This task passed the syscalls table to the auditd template and updates the auditd rules -# If no syscalls table is found for the architecture, the task will use the syscalls table for all architectures -# This way we can ensure that the auditd rules are updated with only syscalls that are supported by the system -# The failover make sure of backward compatibility in case the syscalls table is not found for the architecture - name: Set supported_syscalls variable shell: ausyscall --dump | awk '{print $2}' register: syscalls -- name: Print return information from the previous task - ansible.builtin.debug: - var: syscalls.stdout_lines - - name: POST | Apply auditd template for section 4.1.3.x when: update_audit_template ansible.builtin.template: