Ivan Suzdal | 50a360f | 2018-06-04 16:07:41 +0400 | [diff] [blame] | 1 | applications: |
| 2 | - auditd |
| 3 | classes: |
| 4 | - service.auditd.support |
| 5 | parameters: |
| 6 | auditd: |
| 7 | service: |
| 8 | enabled: true |
| 9 | log_file: /var/log/audit/audit.log |
| 10 | log_format: RAW |
| 11 | log_group: root |
| 12 | priority_boost: 4 |
| 13 | flush: INCREMENTAL |
| 14 | freq: 20 |
| 15 | num_logs: 5 |
| 16 | disp_qos: lossy |
| 17 | dispatcher: /sbin/audispd |
| 18 | name_format: NONE |
| 19 | max_log_file: 6 |
| 20 | max_log_file_action: ROTATE |
| 21 | space_left: 75 |
| 22 | space_left_action: SYSLOG |
| 23 | action_mail_acct: root |
| 24 | admin_space_left: 50 |
| 25 | admin_space_left_action: SUSPEND |
| 26 | disk_full_action: SUSPEND |
| 27 | disk_error_action: SUSPEND |
| 28 | tcp_listen_queue: 5 |
| 29 | tcp_max_per_addr: 1 |
| 30 | tcp_client_max_idle: 0 |
| 31 | enable_krb5: 'no' |
| 32 | krb5_principal: auditd |