...

stackhpc · Oct 18, 2023 · b54bfd2 · b54bfd2
1 parent d46c360
commit b54bfd2
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/etc/kayobe/inventory/group_vars/overcloud/cis b/etc/kayobe/inventory/group_vars/overcloud/cis
@@ -55,12 +55,16 @@ rhel9cis_rule_5_3_4: false
 # Please double-check yourself with: sudo paswd -S root
 rhel9cis_rule_5_5_6: false
 
+# Configure log rotation to prevent audit logs from filling the disk
 rhel9cis_auditd:
     space_left_action: syslog
     action_mail_acct: root
     admin_space_left_action: halt
     max_log_file_action: rotate
 
+# Max size of audit logs (MB)
+rhel9cis_max_log_file_size: 1024
+
 ##############################################################################
 # Ubuntu Jammy CIS Hardening Configuration
 
@@ -133,6 +137,9 @@ ubtu22cis_auditd:
     admin_space_left_action: halt
     max_log_file_action: rotate
 
+# Max size of audit logs (MB)
+ubtu22cis_max_log_file_size: 1024
+
 # Disable grub bootloader password. Requires overriding
 # ubtu22cis_bootloader_password_hash
 ubtu22cis_rule_1_4_1: false