Commit dad581b7 authored by Jonathan Lent's avatar Jonathan Lent
Browse files

Fix for EL5 (simplify will not work)

parent ca208951
release/001.010 (2015-08-03)
Disable 'simplify' mode on RHEL/CentOS5, regardless of
setting override, due to unmet dependency of
perl-POSIX-strptime (would have to edit the 3rd party
auditd simplify perl code to make compatible) (jlent)
release/001.009 (2015-07-31)
Remove ANOTHER duplicate line from audit.rules (adamhl)
......
......@@ -79,8 +79,14 @@ define audit::auditd (
}
# Test the simplification of auditd logging
if $simplify == 'NONE' {
package { 'stanford-auditd-tools': ensure => absent }
# The 'simplify' plugin has a dependency of perl-POSIX-strptime that is
# not met on RHEL/CentOS5; quietly disabling 'simplify' in that case
if ($simplify == 'NONE' or ($::osfamily == 'RedHat' and $::lsbmajdistrelease == '5')) {
if ($::osfamily == 'RedHat' and $::lsbmajdistrelease == '5') {
# do nothing - package is not available in repos
} else {
package { 'stanford-auditd-tools': ensure => absent }
}
file {
'/etc/audisp/plugins.d/simplify.conf': ensure => absent;
'/etc/newsyslog.daily/audisp-simplify': ensure => absent;
......@@ -99,7 +105,7 @@ define audit::auditd (
source => "$afile/etc/audisp/plugins.d/simplify.conf",
require => Package['auditd'];
'/etc/newsyslog.daily/audisp-simplify':
mode => 644,
mode => '0644',
source => "$afile/etc/newsyslog.daily/audisp-simplify",
require => Package['newsyslog'];
}
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment