Ensure audit rules.d are set 0600

ComplianceAsCode · Dec 19, 2024 · efb630e · efb630e
1 parent a06c809
commit efb630e
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/shared/templates/audit_file_contents/ansible.template b/shared/templates/audit_file_contents/ansible.template
@@ -10,7 +10,7 @@
     )
 }}}
 
-- name: Remove any permissions from other group
-  file:
+- name: {{{ rule_title }}} - Remove any permissions from group and other
+  ansible.builtin.file:
     path: {{{ FILEPATH }}}
-    mode: o-rwx
+    mode: g-rwx,o-rwx