afegit logrotate

CHANGELOG.md

@@ -1,2 +1,5 @@
 # CHANGELOG
 
+## 0.1.6
+
+* logrotate configuration file using eyp-logrotate (manage_logrotate=>false to disable)

README.md

@@ -66,6 +66,12 @@ class { 'audit::tty': }
 
 * **buffers**: buffers to survive stress events (default: 320)
 * **add_default_rules**: add the following default rules - it will apply b64 only if is applicable, same for /etc/sysconfig/network (default: true)
+* **manage_logrotate**: add logrotate config file (default: true)
+* **logrotate_rotate**     = '4',
+* **logrotate_compress**   = true,
+* **logrotate_missingok**  = true,
+* **logrotate_notifempty** = true,
+
 ```
 -w /var/tmp -p x
 -w /tmp -p x

manifests/init.pp

@@ -1,8 +1,13 @@
 # == Class: audit
 #
 class audit (
-              $buffers='320',
-              $add_default_rules=true,
+              $buffers              = '320',
+              $add_default_rules    = true,
+              $manage_logrotate     = true,
+              $logrotate_rotate     = '4',
+              $logrotate_compress   = true,
+              $logrotate_missingok  = true,
+              $logrotate_notifempty = true,
             ) inherits audit::params {
 
   package { $audit::params::pkg_audit:
@@ -41,6 +46,15 @@
     }
   }
 
-
-
+  if($manage_logrotate)
+  {
+    logrotate::logs { 'audit':
+      ensure        => present,
+      log           => [ '/var/log/audit/audit.log' ],
+      rotate        => '4',
+      compress      => true,
+      missingok     => true,
+      notifempty    => true,
+    }
+  }
 }

metadata.json

@@ -1,6 +1,6 @@
 {
   "name": "eyp-audit",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "author": "eyp",
   "summary": "basic auditd support",
   "license": "Apache-2.0",