Merge pull request #15073 from jan-cerny/auditd_conf_file_mode_stabilization

Stabilization: Use symbolic file mode for /etc/audit/auditd.conf

Author: vojtapolasek

linux_os/guide/auditing/configure_auditd_data_retention/auditd_data_disk_error_action/ansible/shared.yml

@@ -12,5 +12,5 @@
     regexp: '^\s*disk_error_action\s*=\s*.*$'
     state: present
     create: yes
-    mode: 0640
+    mode: 'u-x,g-wx,o-rwx'
   #notify: reload auditd

linux_os/guide/auditing/configure_auditd_data_retention/auditd_data_disk_error_action_stig/ansible/shared.yml

@@ -12,5 +12,5 @@
     regexp: '^\s*disk_error_action\s*=\s*.*$'
     state: present
     create: yes
-    mode: 0640
+    mode: 'u-x,g-wx,o-rwx'
   #notify: reload auditd

linux_os/guide/auditing/configure_auditd_data_retention/auditd_data_disk_full_action/ansible/shared.yml

@@ -12,5 +12,5 @@
     regexp: '^\s*disk_full_action\s*=\s*.*$'
     state: present
     create: yes
-    mode: 0640
+    mode: 'u-x,g-wx,o-rwx'
   #notify: reload auditd

linux_os/guide/auditing/configure_auditd_data_retention/auditd_data_disk_full_action_stig/ansible/shared.yml

@@ -12,5 +12,5 @@
     regexp: '^\s*disk_full_action\s*=\s*.*$'
     state: present
     create: yes
-    mode: 0640
+    mode: 'u-x,g-wx,o-rwx'
   #notify: reload auditd

linux_os/guide/auditing/configure_auditd_data_retention/auditd_data_retention_action_mail_acct/ansible/shared.yml

@@ -12,4 +12,4 @@
         line: "action_mail_acct = {{ var_auditd_action_mail_acct }}"
         state: present
         create: yes
-        mode: 0640
+        mode: 'u-x,g-wx,o-rwx'

linux_os/guide/auditing/configure_auditd_data_retention/auditd_data_retention_admin_space_left_action/ansible/shared.yml

@@ -12,5 +12,5 @@
     regexp: '^\s*admin_space_left_action\s*=\s*.*$'
     state: present
     create: yes
-    mode: 0640
+    mode: 'u-x,g-wx,o-rwx'
   #notify: reload auditd

linux_os/guide/auditing/configure_auditd_data_retention/auditd_data_retention_admin_space_left_percentage/ansible/shared.yml

@@ -12,4 +12,4 @@
     regexp: '^\s*admin_space_left\s*=\s*.*$'
     state: present
     create: yes
-    mode: 0640
+    mode: 'u-x,g-wx,o-rwx'

linux_os/guide/auditing/configure_auditd_data_retention/auditd_data_retention_flush/ansible/shared.yml

@@ -12,5 +12,5 @@
     line: "flush = {{ var_auditd_flush }}"
     state: present
     create: yes
-    mode: 0640
+    mode: 'u-x,g-wx,o-rwx'
   #notify: reload auditd

linux_os/guide/auditing/configure_auditd_data_retention/auditd_data_retention_max_log_file/ansible/shared.yml

@@ -12,5 +12,5 @@
     line: "max_log_file = {{ var_auditd_max_log_file }}"
     state: present
     create: yes
-    mode: 0640
+    mode: 'u-x,g-wx,o-rwx'
   #notify: reload auditd

linux_os/guide/auditing/configure_auditd_data_retention/auditd_data_retention_max_log_file_action/ansible/shared.yml

@@ -12,5 +12,5 @@
     regexp: '^\s*max_log_file_action\s*=\s*.*$'
     state: present
     create: yes
-    mode: 0640
+    mode: 'u-x,g-wx,o-rwx'
   #notify: reload auditd