Switch defaults back to what they were

Default space_left_action was SYSLOG and admin_space_left_action was SUSPEND Signed-off-by: Tim de Koning <[email protected]>
dev-sec · Dec 21, 2023 · 5cfde01 · 5cfde01
1 parent a198d3d
commit 5cfde01
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/attributes/default.rb b/attributes/default.rb
@@ -261,9 +261,9 @@
 default['os-hardening']['auditd']['max_log_file_action'] = 'keep_logs'
 default['os-hardening']['auditd']['space_left'] = 75
 default['os-hardening']['auditd']['action_mail_acct'] = 'root'
-default['os-hardening']['auditd']['space_left_action'] = 'EMAIL'
+default['os-hardening']['auditd']['space_left_action'] = 'SYSLOG'
 default['os-hardening']['auditd']['admin_space_left'] = 50
-default['os-hardening']['auditd']['admin_space_left_action'] = 'halt'
+default['os-hardening']['auditd']['admin_space_left_action'] = 'SUSPEND'
 default['os-hardening']['auditd']['disk_full_action'] = 'SUSPEND'
 default['os-hardening']['auditd']['disk_error_action'] = 'SUSPEND'
 default['os-hardening']['auditd']['flush'] = 'INCREMENTAL'

diff --git a/templates/default/login.defs.erb b/templates/default/login.defs.erb
@@ -181,7 +181,7 @@ ENCRYPT_METHOD SHA512
 
 # Obsoleted by PAM
 # ================
-# These options are now handled by PAM. Please edit the appropriate file in `/etc/pam.d/` to enable the equivelants of them.
+# These options are now handled by PAM. Please edit the appropriate file in `/etc/pam.d/` to enable the equivalents of them.
 #MOTD_FILE
 #DIALUPS_CHECK_ENAB
 #LASTLOG_ENAB