diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2025-01-28 15:21:44 +0100 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2025-01-28 15:28:51 +0100 |
| commit | c7a9f907a61cf06c73c56628210257b639a6bb50 (patch) | |
| tree | 1d38a5eb8d857073d88e5630d0714acca1c5c144 /roles | |
| parent | 5b4c769b7f491c181eea26dcbf9df46046621bd9 (diff) | |
Fix logcheck.logfiles permissions.
Regression from 0c5664f27d84c6d616b2c2fb0812aad94c4185af.
Diffstat (limited to 'roles')
| -rw-r--r-- | roles/common/tasks/logging.yml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/roles/common/tasks/logging.yml b/roles/common/tasks/logging.yml index aaea63f..699c6e3 100644 --- a/roles/common/tasks/logging.yml +++ b/roles/common/tasks/logging.yml @@ -43,41 +43,41 @@ owner=root group=root mode=0644 with_items: - logcheck.conf - ignore.d.server/common-local - ignore.d.server/dovecot-local - ignore.d.server/postfix-local - ignore.d.server/strongswan-local # logcheck-sudo already exists, but changing the filename for our # local modifications would defeat the ruleset - violations.ignore.d/logcheck-sudo tags: - logcheck - name: Configure logcheck (2) lineinfile: dest=/etc/logcheck/logcheck.logfiles line={{ item }} state=present create=yes owner=root group=root - mode=0640 + mode=0644 with_items: - /var/log/syslog - /var/log/auth.log - /var/log/mail.log tags: - logcheck - name: Minimal logging policy (1) lineinfile: dest=/etc/logrotate.d/rsyslog regexp="^/var/log/mail\\.(log|info|sasl)$" state=absent owner=root group=root mode=0644 - name: Minimal logging policy (2) copy: src=etc/logrotate.d/fripost-mail dest=/etc/logrotate.d/fripost-mail owner=root group=root mode=0644 tags: |