Skip to content
Snippets Groups Projects
Commit dad581b7 authored by Jonathan Lent's avatar Jonathan Lent
Browse files

Fix for EL5 (simplify will not work)

parent ca208951
No related branches found
Tags release/001.010
No related merge requests found
release/001.010 (2015-08-03)
Disable 'simplify' mode on RHEL/CentOS5, regardless of
setting override, due to unmet dependency of
perl-POSIX-strptime (would have to edit the 3rd party
auditd simplify perl code to make compatible) (jlent)
release/001.009 (2015-07-31) release/001.009 (2015-07-31)
Remove ANOTHER duplicate line from audit.rules (adamhl) Remove ANOTHER duplicate line from audit.rules (adamhl)
......
...@@ -79,8 +79,14 @@ define audit::auditd ( ...@@ -79,8 +79,14 @@ define audit::auditd (
} }
# Test the simplification of auditd logging # Test the simplification of auditd logging
if $simplify == 'NONE' { # The 'simplify' plugin has a dependency of perl-POSIX-strptime that is
package { 'stanford-auditd-tools': ensure => absent } # not met on RHEL/CentOS5; quietly disabling 'simplify' in that case
if ($simplify == 'NONE' or ($::osfamily == 'RedHat' and $::lsbmajdistrelease == '5')) {
if ($::osfamily == 'RedHat' and $::lsbmajdistrelease == '5') {
# do nothing - package is not available in repos
} else {
package { 'stanford-auditd-tools': ensure => absent }
}
file { file {
'/etc/audisp/plugins.d/simplify.conf': ensure => absent; '/etc/audisp/plugins.d/simplify.conf': ensure => absent;
'/etc/newsyslog.daily/audisp-simplify': ensure => absent; '/etc/newsyslog.daily/audisp-simplify': ensure => absent;
...@@ -99,7 +105,7 @@ define audit::auditd ( ...@@ -99,7 +105,7 @@ define audit::auditd (
source => "$afile/etc/audisp/plugins.d/simplify.conf", source => "$afile/etc/audisp/plugins.d/simplify.conf",
require => Package['auditd']; require => Package['auditd'];
'/etc/newsyslog.daily/audisp-simplify': '/etc/newsyslog.daily/audisp-simplify':
mode => 644, mode => '0644',
source => "$afile/etc/newsyslog.daily/audisp-simplify", source => "$afile/etc/newsyslog.daily/audisp-simplify",
require => Package['newsyslog']; require => Package['newsyslog'];
} }
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment