summaryrefslogtreecommitdiffstats
path: root/roles/common/tasks/logging.yml
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2025-01-28 15:21:44 +0100
committerGuilhem Moulin <guilhem@fripost.org>2025-01-28 15:28:51 +0100
commitc7a9f907a61cf06c73c56628210257b639a6bb50 (patch)
tree1d38a5eb8d857073d88e5630d0714acca1c5c144 /roles/common/tasks/logging.yml
parent5b4c769b7f491c181eea26dcbf9df46046621bd9 (diff)
Fix logcheck.logfiles permissions.HEADmaster
Regression from 0c5664f27d84c6d616b2c2fb0812aad94c4185af.
Diffstat (limited to 'roles/common/tasks/logging.yml')
-rw-r--r--roles/common/tasks/logging.yml2
1 files changed, 1 insertions, 1 deletions
diff --git a/roles/common/tasks/logging.yml b/roles/common/tasks/logging.yml
index aaea63f..699c6e3 100644
--- a/roles/common/tasks/logging.yml
+++ b/roles/common/tasks/logging.yml
@@ -43,41 +43,41 @@
owner=root group=root
mode=0644
with_items:
- logcheck.conf
- ignore.d.server/common-local
- ignore.d.server/dovecot-local
- ignore.d.server/postfix-local
- ignore.d.server/strongswan-local
# logcheck-sudo already exists, but changing the filename for our
# local modifications would defeat the ruleset
- violations.ignore.d/logcheck-sudo
tags:
- logcheck
- name: Configure logcheck (2)
lineinfile: dest=/etc/logcheck/logcheck.logfiles
line={{ item }}
state=present
create=yes
owner=root group=root
- mode=0640
+ mode=0644
with_items:
- /var/log/syslog
- /var/log/auth.log
- /var/log/mail.log
tags:
- logcheck
- name: Minimal logging policy (1)
lineinfile: dest=/etc/logrotate.d/rsyslog
regexp="^/var/log/mail\\.(log|info|sasl)$"
state=absent
owner=root group=root
mode=0644
- name: Minimal logging policy (2)
copy: src=etc/logrotate.d/fripost-mail
dest=/etc/logrotate.d/fripost-mail
owner=root group=root
mode=0644
tags: