#
# This file controls the configuration of the audit daemon
#

######				  ######
#  Configure general logging features  #
####				   #####
log_file = <%= node['auditd']['log_file'] %>
log_group = <%= node['auditd']['log_group'] %>
log_format = <%= node['auditd']['log_format'] %>
freq = <%= node['auditd']['freq'] %>
max_log_file = <%= node['auditd']['max_log_file'] %>
num_logs = <%= node['auditd']['num_logs'] %>
priority_boost = <%= node['auditd']['priority_boost'] %>
disp_qos = <%= node['auditd']['disp_qos'] %>
dispatcher = /sbin/audispd
name_format = <%= node['auditd']['name_format'] %>

######                                ###### 
# CIS requires to keep all logs. Entirely. # 
####                                    ####
max_log_file_action = <%= node['auditd']['max_log_file_action'] %>
space_left = <%= node['auditd']['space_left'] %>

######                             ###### 
# Hardening logging overflow behaviour  # 
####                                 ####
space_left_action = <%= node['auditd']['space_left_action'] %>
action_mail_acct = <%= node['auditd']['action_mail_acct'] %>
admin_space_left_action = <%= node['auditd']['admin_space_left_action'] %>
admin_space_left = <%= node['auditd']['admin_space_left'] %>

disk_full_action = <%= node['auditd']['disk_full_action'] %>
disk_error_action = <%= node['auditd']['disk_error_action'] %>
use_libwrap = <%= node['auditd']['use_libwrap'] %>
tcp_listen_queue = <%= node['auditd']['tcp_listen_queue'] %>
tcp_max_per_addr = <%= node['auditd']['tcp_max_per_addr'] %>
tcp_client_max_idle = <%= node['auditd']['tcp_client_max_idle'] %>
enable_krb5 = <%= node['auditd']['enable_krb5'] %>
krb5_principal = <%= node['auditd']['krb5_principal'] %>
<% if !node['platform_version'].to_s.start_with?('6') %>
distribute_network = <%= node['auditd']['distribute_network'] %>
<% end %>