From 862edbbe4076d6ce8333aab67950d08d0feb9aec Mon Sep 17 00:00:00 2001
From: Sebastian Gumprich <rndmh3ro@users.noreply.github.com>
Date: Thu, 14 Jul 2022 15:03:34 +0200
Subject: [PATCH] Update roles/os_hardening/tasks/minimize_access.yml

---
 roles/os_hardening/tasks/minimize_access.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/roles/os_hardening/tasks/minimize_access.yml b/roles/os_hardening/tasks/minimize_access.yml
index 4d174a08..b2c7718b 100644
--- a/roles/os_hardening/tasks/minimize_access.yml
+++ b/roles/os_hardening/tasks/minimize_access.yml
@@ -229,7 +229,9 @@
     owner: 'root'
     group: 'root'
     mode: '{{ os_mnt_var_log_audit_dir_mode }}'
-  when: var_log_audit_exists.stat.exists | bool
+  when:
+    - var_log_audit_exists.stat.exists | bool
+    - os_auditd_enabled | bool
 
 - name: Mount /var/tmp with hardened options
   mount: