Updated defaults/main.yml

defaults/main.yml

@@ -2,7 +2,7 @@
 # defaults file for rhel8_stig
 var_aide_scan_notification_email: root@localhost
 var_system_crypto_policy: FIPS
-sshd_approved_ciphers: aes256-ctr,aes192-ctr,aes128-ctr
+sshd_approved_ciphers: aes256-ctr,aes192-ctr,aes128-ctr,[email protected],[email protected]
 sshd_approved_macs: hmac-sha2-512,hmac-sha2-256,[email protected],[email protected]
 inactivity_timeout_value: '900'
 var_screensaver_lock_delay: '5'
@@ -41,6 +41,7 @@ var_auditd_disk_full_action: syslog|single|halt
 var_auditd_action_mail_acct: root
 var_auditd_space_left_action: email
 var_auditd_space_left_percentage: '25'
+var_auditd_name_format: hostname|fqd|numeric
 rsyslog_remote_loghost_address: logcollector
 sysctl_net_ipv6_conf_all_accept_ra_value: '0'
 sysctl_net_ipv6_conf_all_accept_redirects_value: '0'
@@ -139,6 +140,7 @@ DISA_STIG_RHEL_08_010440: true
 DISA_STIG_RHEL_08_010450: true
 DISA_STIG_RHEL_08_010460: true
 DISA_STIG_RHEL_08_010470: true
+DISA_STIG_RHEL_08_010471: true
 DISA_STIG_RHEL_08_010472: true
 DISA_STIG_RHEL_08_010480: true
 DISA_STIG_RHEL_08_010490: true
@@ -179,8 +181,11 @@ DISA_STIG_RHEL_08_010830: true
 DISA_STIG_RHEL_08_020011: true
 DISA_STIG_RHEL_08_020012: true
 DISA_STIG_RHEL_08_020013: true
+DISA_STIG_RHEL_08_020014: true
 DISA_STIG_RHEL_08_020015: true
+DISA_STIG_RHEL_08_020016: true
 DISA_STIG_RHEL_08_020017: true
+DISA_STIG_RHEL_08_020018: true
 DISA_STIG_RHEL_08_020019: true
 DISA_STIG_RHEL_08_020021: true
 DISA_STIG_RHEL_08_020023: true
@@ -223,6 +228,7 @@ DISA_STIG_RHEL_08_020300: true
 DISA_STIG_RHEL_08_020310: true
 DISA_STIG_RHEL_08_020330: true
 DISA_STIG_RHEL_08_020331: true
+DISA_STIG_RHEL_08_020332: true
 DISA_STIG_RHEL_08_020340: true
 DISA_STIG_RHEL_08_020350: true
 DISA_STIG_RHEL_08_020351: true
@@ -237,6 +243,8 @@ DISA_STIG_RHEL_08_030061: true
 DISA_STIG_RHEL_08_030062: true
 DISA_STIG_RHEL_08_030063: true
 DISA_STIG_RHEL_08_030070: true
+DISA_STIG_RHEL_08_030100: true
+DISA_STIG_RHEL_08_030110: true
 DISA_STIG_RHEL_08_030121: true
 DISA_STIG_RHEL_08_030122: true
 DISA_STIG_RHEL_08_030130: true
@@ -536,6 +544,8 @@ dir_ownership_library_dirs: true
 dir_permissions_library_dirs: true
 dir_perms_world_writable_root_owned: true
 dir_perms_world_writable_sticky_bits: true
+directory_group_ownership_var_log_audit: true
+directory_ownership_var_log_audit: true
 disable_ctrlaltdel_burstaction: true
 disable_ctrlaltdel_reboot: true
 disable_strategy: true