Switch defaults back to what they were

Default space_left_action was SYSLOG and admin_space_left_action was SUSPEND
dev-sec · Dec 14, 2023 · ec33a8b · ec33a8b
1 parent 9e9496f
commit ec33a8b
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/attributes/default.rb b/attributes/default.rb
@@ -261,9 +261,9 @@
 default['os-hardening']['auditd']['max_log_file_action'] = 'keep_logs'
 default['os-hardening']['auditd']['space_left'] = 75
 default['os-hardening']['auditd']['action_mail_acct'] = 'root'
-default['os-hardening']['auditd']['space_left_action'] = 'EMAIL'
+default['os-hardening']['auditd']['space_left_action'] = 'SYSLOG'
 default['os-hardening']['auditd']['admin_space_left'] = 50
-default['os-hardening']['auditd']['admin_space_left_action'] = 'halt'
+default['os-hardening']['auditd']['admin_space_left_action'] = 'SUSPEND'
 default['os-hardening']['auditd']['disk_full_action'] = 'SUSPEND'
 default['os-hardening']['auditd']['disk_error_action'] = 'SUSPEND'
 default['os-hardening']['auditd']['flush'] = 'INCREMENTAL'

diff --git a/templates/default/login.defs.erb b/templates/default/login.defs.erb
@@ -181,7 +181,7 @@ ENCRYPT_METHOD SHA512
 
 # Obsoleted by PAM
 # ================
-# These options are now handled by PAM. Please edit the appropriate file in `/etc/pam.d/` to enable the equivelants of them.
+# These options are now handled by PAM. Please edit the appropriate file in `/etc/pam.d/` to enable the equivalents of them.
 #MOTD_FILE
 #DIALUPS_CHECK_ENAB
 #LASTLOG_ENAB