/ansible_role_auditd

Managing auditd.

Ansible role auditd

Managing auditd.

License

MIT / BSD

Author Information

Requirements

  • Ensure a package manager is available and configured with the correct package sources and repositories.
  • Ensure privileged permissions are set for the user executing this role to:
    • Install packages.
    • Manage service settings and configurations.

Dependencies

N/A

Compatibility

Compatible with the following list of operating systems:

  • CentOS 7
  • CentOS 8
  • RHEL 7.x
  • RHEL 8.x

Role Variables

Variable name Description
role_auditd_packages A list of packages to install.
role_auditd_packages A list of parameters for the auditd.conf file.
role_auditd_rules_file_list A list of list containing parameters for audit.d rule files.

Example Playbook

---
- name: Manage auditd
  become: True
  gather_facts: True
  tasks:
    - import_role:
        name: ansible_role_auditd
      vars:
        role_auditd_packages:
          - audit
          - audit-libs
        role_auditd_conf_file:
          dest: /etc/audit/auditd.conf
          src: auditd_conf.j2
          owner: root
          group: root
          mode: '0640'
          parameters:
            - 'some meaningful configuration value'
            - 'some meaningful configuration value'
            - 'some meaningful configuration value'
        role_auditd_rules_file_list_example01:
          - dest: /etc/audit/rules.d/example01.rules
            src: auditd_rules.j2
            state: present
            owner: root
            group: root
            mode: '0640'
            parameters:
            - 'some meaningful configuration value'
            - 'some meaningful configuration value'
            - 'some meaningful configuration value'
        role_auditd_rules_file_list_example02:
          - dest: /etc/audit/rules.d/example02.rules
            src: auditd_rules.j2
            state: present
            owner: root
            group: root
            mode: '0640'
            parameters:
            - 'some meaningful configuration value'
            - 'some meaningful configuration value'
            - 'some meaningful configuration value'
        role_auditd_rules_file_list_example03:
          - dest: /etc/audit/rules.d/example03.rules
            state: absent

...

Useful shell commands

N/A

Additional documentation resources

Testing with Molecule

This role is locally tested with the use of Molecule, the configuration is located at: molecule/default.
The Molecule tests are run (using the docker driver) on Dockerhub images built for this purpose:

CI/CD with Travis CI

This role uses Travis CI to run online tests with the use of Molecule and pushes notifications to import the role into Ansible Galaxy once the tests are successful. The Travis CI configuration is located at the root of the Ansible role .travis.yml

Useful links