Adjust ansible_audit_augenrules_add_syscall_rule to 600

ComplianceAsCode · Jan 7, 2025 · 3b057a4 · 3b057a4
1 parent 0f4e4be
commit 3b057a4
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/shared/macros/10-ansible.jinja b/shared/macros/10-ansible.jinja
@@ -570,6 +570,7 @@ The macro requires following parameters:
     line: '\1\2\3{{ missing_syscalls | join("\3") }}\4'
     backrefs: yes
     state: present
+    mode: g-rwx,o-rwx
   when: syscalls_found | length > 0 and missing_syscalls | length > 0
 
 - name: Add the audit rule to {{ audit_file }}