Make Audita configuration field-specific

This commit is contained in:
2026-09-08 13:22:29 +00:00
parent 3a8c21f0e6
commit e61f02fca6
7 changed files with 320 additions and 32 deletions

View File

@@ -69,6 +69,17 @@
- audita_config_metadata.stat.gr_name == "root"
- audita_config_metadata.stat.mode == "0644"
- name: Read default configuration
become: true
ansible.builtin.slurp:
src: /usr/local/etc/audita/config.yml
register: audita_default_config
- name: Check default configuration
ansible.builtin.assert:
that:
- '(audita_default_config.content | b64decode | from_yaml) == {"version": 1}'
- name: Validate Audita configuration
ansible.builtin.command:
argv: