From b1d95606ec7109361a61af1b1afdd6bc46611c77 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Fri, 27 Jun 2014 17:43:16 +0200
Subject: More logcheck-database tweaks.

---
 roles/common/tasks/logging.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'roles/common/tasks')

diff --git a/roles/common/tasks/logging.yml b/roles/common/tasks/logging.yml
index 472bb3b..3215ebe 100644
--- a/roles/common/tasks/logging.yml
+++ b/roles/common/tasks/logging.yml
@@ -16,13 +16,17 @@
   copy: src=etc/logcheck/{{ item }}
         dest=/etc/logcheck/{{ item }}
         owner=root group=logcheck
-        mode=0640
+        mode=0644
   with_items:
     - logcheck.conf
     - ignore.d.server/common-local
     - ignore.d.server/dovecot-local
     - ignore.d.server/postfix-local
+    # logcheck-sudo already exists, but changing the filename for our
+    # local modifications would defeat the ruleset
     - violations.ignore.d/logcheck-sudo
+  tags:
+    - logcheck
 
 - name: Minimal logging policy (1)
   lineinfile: dest=/etc/logrotate.d/rsyslog
-- 
cgit v1.2.3