pupmod-simp-auditd

Release of 8.14.0

• (SIMP-10744) Add purge behaviour for auditd rules

Release of 8.13.0

• Add EL9 support

Release of 8.12.0

• [puppetsync] Updates for Puppet 8
  • These updates may include the following:
    • Update Gemfile
    • Add support for Puppet 8
    • Drop support for Puppet 6
    • Update module dependencies

• Add AlmaLinux 8 support

• Add RHEL 9 hieradata

• Add RockyLinux 8 support

• Make parameter backlog_wait_time optional because there are auditd versions not supporting it
• Add support for Amazon Linux 2
  -----BEGIN PGP SIGNATURE-----
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=Csmy
-----END PGP SIGNATURE-----

Fixes:

• Actually fix flapping on rotated audit log files

Fixed:

• Ensure that permissions do not flap on rotated audit log files

• Fix the permissions on /var/log/audit

• Changed the auditd_sample_rulesets fact to look in both
  /usr/share/audit/sample-rules and /usr/share/doc/audit*/rules for
  sample rulesets.

Fixes:

• Fixed a bug preventing overflow_action from being set properly

• Removed support for Puppet 5
• Ensured support for Puppet 7 in requirements and stdlib

• Fixed
  • Align EL8 STIG settings
• Changed
  • Bump supported puppet version to include 7
  • Always add the 'head' rules (global auditd config) settings when applying
    rule sets. These do not interfere with user-defined rules and are required
    for proper functionality of the system.

• Use -F key= in lieu of -k in the STIG profile, to match scanner updates.

• Switch auditd rules to be 'always,exit' instead of 'exit,always' to
  match the
  man pages and general scanner updates.
• Expanded simp/rsyslog dependendency range to < 9.0.0.
• Removed EL6 support
  -----BEGIN PGP SIGNATURE-----
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=0Y4B
-----END PGP SIGNATURE-----