From 47ad64d5e17d0d01ba24529a6a6450861fc097d0 Mon Sep 17 00:00:00 2001
From: Jason Rothstein <fdragon@fdragon.org>
Date: Sat, 28 Mar 2020 16:29:32 -0500
Subject: [PATCH] Add rotation policy to EL based OS to match Fedora

---
 templates/RedHat/6/etc/logrotate.conf   | 20 ++++++++++++++++++++
 templates/RedHat/6/etc/logrotate.d/btmp |  7 +++++++
 templates/RedHat/6/etc/logrotate.d/wtmp |  8 ++++++++
 templates/RedHat/7/etc/logrotate.conf   | 20 ++++++++++++++++++++
 templates/RedHat/7/etc/logrotate.d/btmp |  7 +++++++
 templates/RedHat/7/etc/logrotate.d/wtmp |  8 ++++++++
 templates/RedHat/8/etc/logrotate.conf   | 20 ++++++++++++++++++++
 templates/RedHat/8/etc/logrotate.d/btmp |  7 +++++++
 templates/RedHat/8/etc/logrotate.d/wtmp |  8 ++++++++
 vars/Fedora-31-x86_64.yml               |  1 +
 vars/RedHat-6-i386.yml                  |  4 ++++
 vars/RedHat-6-x86_64.yml                |  4 ++++
 vars/RedHat-7-x86_64.yml                |  4 ++++
 vars/RedHat-8-x86_64.yml                |  4 ++++
 14 files changed, 122 insertions(+)
 create mode 100644 templates/RedHat/6/etc/logrotate.conf
 create mode 100644 templates/RedHat/6/etc/logrotate.d/btmp
 create mode 100644 templates/RedHat/6/etc/logrotate.d/wtmp
 create mode 100644 templates/RedHat/7/etc/logrotate.conf
 create mode 100644 templates/RedHat/7/etc/logrotate.d/btmp
 create mode 100644 templates/RedHat/7/etc/logrotate.d/wtmp
 create mode 100644 templates/RedHat/8/etc/logrotate.conf
 create mode 100644 templates/RedHat/8/etc/logrotate.d/btmp
 create mode 100644 templates/RedHat/8/etc/logrotate.d/wtmp

diff --git a/templates/RedHat/6/etc/logrotate.conf b/templates/RedHat/6/etc/logrotate.conf
new file mode 100644
index 0000000..54b6e97
--- /dev/null
+++ b/templates/RedHat/6/etc/logrotate.conf
@@ -0,0 +1,20 @@
+# see "man logrotate" for details
+# rotate log files weekly
+daily
+
+# keep 4 weeks worth of backlogs
+rotate 90
+
+# create new (empty) log files after rotating old ones
+create
+
+# use date as a suffix of the rotated file
+dateext
+
+# uncomment this if you want your log files compressed
+compress
+
+# packages drop log rotation information into this directory
+include /etc/logrotate.d
+
+# system-specific logs may be also be configured here.
diff --git a/templates/RedHat/6/etc/logrotate.d/btmp b/templates/RedHat/6/etc/logrotate.d/btmp
new file mode 100644
index 0000000..0aa1ae1
--- /dev/null
+++ b/templates/RedHat/6/etc/logrotate.d/btmp
@@ -0,0 +1,7 @@
+# no packages own btmp -- we'll rotate it here
+/var/log/btmp {
+    missingok
+    monthly
+    create 0660 root utmp
+    rotate 1
+}
diff --git a/templates/RedHat/6/etc/logrotate.d/wtmp b/templates/RedHat/6/etc/logrotate.d/wtmp
new file mode 100644
index 0000000..cc8a151
--- /dev/null
+++ b/templates/RedHat/6/etc/logrotate.d/wtmp
@@ -0,0 +1,8 @@
+# no packages own wtmp -- we'll rotate it here
+/var/log/wtmp {
+    missingok
+    monthly
+    create 0664 root utmp
+    minsize 1M
+    rotate 1
+}
diff --git a/templates/RedHat/7/etc/logrotate.conf b/templates/RedHat/7/etc/logrotate.conf
new file mode 100644
index 0000000..54b6e97
--- /dev/null
+++ b/templates/RedHat/7/etc/logrotate.conf
@@ -0,0 +1,20 @@
+# see "man logrotate" for details
+# rotate log files weekly
+daily
+
+# keep 4 weeks worth of backlogs
+rotate 90
+
+# create new (empty) log files after rotating old ones
+create
+
+# use date as a suffix of the rotated file
+dateext
+
+# uncomment this if you want your log files compressed
+compress
+
+# packages drop log rotation information into this directory
+include /etc/logrotate.d
+
+# system-specific logs may be also be configured here.
diff --git a/templates/RedHat/7/etc/logrotate.d/btmp b/templates/RedHat/7/etc/logrotate.d/btmp
new file mode 100644
index 0000000..0aa1ae1
--- /dev/null
+++ b/templates/RedHat/7/etc/logrotate.d/btmp
@@ -0,0 +1,7 @@
+# no packages own btmp -- we'll rotate it here
+/var/log/btmp {
+    missingok
+    monthly
+    create 0660 root utmp
+    rotate 1
+}
diff --git a/templates/RedHat/7/etc/logrotate.d/wtmp b/templates/RedHat/7/etc/logrotate.d/wtmp
new file mode 100644
index 0000000..cc8a151
--- /dev/null
+++ b/templates/RedHat/7/etc/logrotate.d/wtmp
@@ -0,0 +1,8 @@
+# no packages own wtmp -- we'll rotate it here
+/var/log/wtmp {
+    missingok
+    monthly
+    create 0664 root utmp
+    minsize 1M
+    rotate 1
+}
diff --git a/templates/RedHat/8/etc/logrotate.conf b/templates/RedHat/8/etc/logrotate.conf
new file mode 100644
index 0000000..54b6e97
--- /dev/null
+++ b/templates/RedHat/8/etc/logrotate.conf
@@ -0,0 +1,20 @@
+# see "man logrotate" for details
+# rotate log files weekly
+daily
+
+# keep 4 weeks worth of backlogs
+rotate 90
+
+# create new (empty) log files after rotating old ones
+create
+
+# use date as a suffix of the rotated file
+dateext
+
+# uncomment this if you want your log files compressed
+compress
+
+# packages drop log rotation information into this directory
+include /etc/logrotate.d
+
+# system-specific logs may be also be configured here.
diff --git a/templates/RedHat/8/etc/logrotate.d/btmp b/templates/RedHat/8/etc/logrotate.d/btmp
new file mode 100644
index 0000000..0aa1ae1
--- /dev/null
+++ b/templates/RedHat/8/etc/logrotate.d/btmp
@@ -0,0 +1,7 @@
+# no packages own btmp -- we'll rotate it here
+/var/log/btmp {
+    missingok
+    monthly
+    create 0660 root utmp
+    rotate 1
+}
diff --git a/templates/RedHat/8/etc/logrotate.d/wtmp b/templates/RedHat/8/etc/logrotate.d/wtmp
new file mode 100644
index 0000000..cc8a151
--- /dev/null
+++ b/templates/RedHat/8/etc/logrotate.d/wtmp
@@ -0,0 +1,8 @@
+# no packages own wtmp -- we'll rotate it here
+/var/log/wtmp {
+    missingok
+    monthly
+    create 0664 root utmp
+    minsize 1M
+    rotate 1
+}
diff --git a/vars/Fedora-31-x86_64.yml b/vars/Fedora-31-x86_64.yml
index 4cb4572..36eafef 100644
--- a/vars/Fedora-31-x86_64.yml
+++ b/vars/Fedora-31-x86_64.yml
@@ -8,3 +8,4 @@ template_list:
   - { dest: '/etc/logrotate.conf', force: 'yes', group: 'root', mode: '0644', owner: 'root', src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logortate.conf' }
   - { dest: '/etc/logrotate.d/btmp', force: 'yes', group: 'root', mode: '0644', owner: 'root', src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logortate.d/btmp' }
   - { dest: '/etc/logrotate.d/wtmp', force: 'yes', group: 'root', mode: '0644', owner: 'root', src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logortate.d/wtmp' }
+
diff --git a/vars/RedHat-6-i386.yml b/vars/RedHat-6-i386.yml
index 402aecc..3fcec35 100644
--- a/vars/RedHat-6-i386.yml
+++ b/vars/RedHat-6-i386.yml
@@ -2,4 +2,8 @@
 # vars file for ensure_log_rotation
 package_list:
   - { name: 'logrotate', state: 'present' }
+template_list:
+  - { dest: '/etc/logrotate.conf', force: 'yes', group: 'root', mode: '0644', owner: 'root', src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logortate.conf' }
+  - { dest: '/etc/logrotate.d/btmp', force: 'yes', group: 'root', mode: '0644', owner: 'root', src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logortate.d/btmp' }
+  - { dest: '/etc/logrotate.d/wtmp', force: 'yes', group: 'root', mode: '0644', owner: 'root', src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logortate.d/wtmp' }
 
diff --git a/vars/RedHat-6-x86_64.yml b/vars/RedHat-6-x86_64.yml
index 402aecc..3fcec35 100644
--- a/vars/RedHat-6-x86_64.yml
+++ b/vars/RedHat-6-x86_64.yml
@@ -2,4 +2,8 @@
 # vars file for ensure_log_rotation
 package_list:
   - { name: 'logrotate', state: 'present' }
+template_list:
+  - { dest: '/etc/logrotate.conf', force: 'yes', group: 'root', mode: '0644', owner: 'root', src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logortate.conf' }
+  - { dest: '/etc/logrotate.d/btmp', force: 'yes', group: 'root', mode: '0644', owner: 'root', src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logortate.d/btmp' }
+  - { dest: '/etc/logrotate.d/wtmp', force: 'yes', group: 'root', mode: '0644', owner: 'root', src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logortate.d/wtmp' }
 
diff --git a/vars/RedHat-7-x86_64.yml b/vars/RedHat-7-x86_64.yml
index 402aecc..3fcec35 100644
--- a/vars/RedHat-7-x86_64.yml
+++ b/vars/RedHat-7-x86_64.yml
@@ -2,4 +2,8 @@
 # vars file for ensure_log_rotation
 package_list:
   - { name: 'logrotate', state: 'present' }
+template_list:
+  - { dest: '/etc/logrotate.conf', force: 'yes', group: 'root', mode: '0644', owner: 'root', src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logortate.conf' }
+  - { dest: '/etc/logrotate.d/btmp', force: 'yes', group: 'root', mode: '0644', owner: 'root', src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logortate.d/btmp' }
+  - { dest: '/etc/logrotate.d/wtmp', force: 'yes', group: 'root', mode: '0644', owner: 'root', src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logortate.d/wtmp' }
 
diff --git a/vars/RedHat-8-x86_64.yml b/vars/RedHat-8-x86_64.yml
index 402aecc..3fcec35 100644
--- a/vars/RedHat-8-x86_64.yml
+++ b/vars/RedHat-8-x86_64.yml
@@ -2,4 +2,8 @@
 # vars file for ensure_log_rotation
 package_list:
   - { name: 'logrotate', state: 'present' }
+template_list:
+  - { dest: '/etc/logrotate.conf', force: 'yes', group: 'root', mode: '0644', owner: 'root', src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logortate.conf' }
+  - { dest: '/etc/logrotate.d/btmp', force: 'yes', group: 'root', mode: '0644', owner: 'root', src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logortate.d/btmp' }
+  - { dest: '/etc/logrotate.d/wtmp', force: 'yes', group: 'root', mode: '0644', owner: 'root', src: '{{ ansible_distribution }}/{{ ansible_distribution_major_version }}/etc/logortate.d/wtmp' }