Create audit rules with 064 permissions

shared/macros-ansible.jinja

@@ -467,6 +467,7 @@ The macro requires following parameters:
     path: '{{ audit_file }}'
     line: "{{{ action_arch_filters }}}{{{ syscall_flag }}}{{ syscalls | join(',') }}{{{ other_filters }}}{{{ auid_filters}}} -F key={{{ key }}}"
     create: true
+    mode: 0640
     state: present
   when: syscalls_found | length == 0
 {{%- endmacro %}}