From f5dc2753cfa0942afbf6d2c11cf936a9322c4754 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20=C4=8Cern=C3=BD?= Date: Fri, 18 Sep 2026 15:21:01 +0200 Subject: [PATCH] Fix broken remediation in file_ownership_var_log_audit_stig The `chown` command contained duplicate directory path, which caused that the file woner on the log file wasn't changed. In addition, enable Ansible remediation for this rule on RHEL. Fixes: https://github.com/ComplianceAsCode/content/issues/15129 --- .../file_ownership_var_log_audit_stig/ansible/shared.yml | 2 +- .../file_ownership_var_log_audit_stig/bash/shared.sh | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/linux_os/guide/auditing/auditd_configure_rules/file_ownership_var_log_audit_stig/ansible/shared.yml b/linux_os/guide/auditing/auditd_configure_rules/file_ownership_var_log_audit_stig/ansible/shared.yml index 8d2d4c4081b..1227372237a 100644 --- a/linux_os/guide/auditing/auditd_configure_rules/file_ownership_var_log_audit_stig/ansible/shared.yml +++ b/linux_os/guide/auditing/auditd_configure_rules/file_ownership_var_log_audit_stig/ansible/shared.yml @@ -1,4 +1,4 @@ -# platform = multi_platform_sle +# platform = multi_platform_sle,multi_platform_rhel # reboot = false # strategy = restrict # complexity = low diff --git a/linux_os/guide/auditing/auditd_configure_rules/file_ownership_var_log_audit_stig/bash/shared.sh b/linux_os/guide/auditing/auditd_configure_rules/file_ownership_var_log_audit_stig/bash/shared.sh index 0c4131a7321..d57a06102ae 100644 --- a/linux_os/guide/auditing/auditd_configure_rules/file_ownership_var_log_audit_stig/bash/shared.sh +++ b/linux_os/guide/auditing/auditd_configure_rules/file_ownership_var_log_audit_stig/bash/shared.sh @@ -5,4 +5,4 @@ if LC_ALL=C grep -iqE '^[[:space:]]*log_file\b' /etc/audit/auditd.conf; then fi FILE=${FILE:-/var/log/audit/audit.log} -chown root "$(dirname "$FILE")"/"${FILE}"* +chown root "${FILE}"*