From b1d95606ec7109361a61af1b1afdd6bc46611c77 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Fri, 27 Jun 2014 17:43:16 +0200
Subject: More logcheck-database tweaks.
---
roles/common/tasks/logging.yml | 6 +++++-
1 file changed, 5 insertions(+), 1 deletion(-)
(limited to 'roles/common/tasks')
diff --git a/roles/common/tasks/logging.yml b/roles/common/tasks/logging.yml
index 472bb3b..3215ebe 100644
--- a/roles/common/tasks/logging.yml
+++ b/roles/common/tasks/logging.yml
@@ -16,13 +16,17 @@
copy: src=etc/logcheck/{{ item }}
dest=/etc/logcheck/{{ item }}
owner=root group=logcheck
- mode=0640
+ mode=0644
with_items:
- logcheck.conf
- ignore.d.server/common-local
- ignore.d.server/dovecot-local
- ignore.d.server/postfix-local
+ # logcheck-sudo already exists, but changing the filename for our
+ # local modifications would defeat the ruleset
- violations.ignore.d/logcheck-sudo
+ tags:
+ - logcheck
- name: Minimal logging policy (1)
lineinfile: dest=/etc/logrotate.d/rsyslog
--
cgit v1.2.3