4.2.1.5 conflicts with itself on cron, auth logs

[scottdoane]

The auth and cron stanzas appear to be checking against the same line BEGIN Auth SETTINGS (ANSIBLE MANAGED), overwriting each other on every run.

TASK [RHEL8-CIS : 4.2.1.5 | PATCH | Ensure logging is configured | Auth Settings] ********************************************************************
--- before: /etc/rsyslog.conf (content)
+++ after: /etc/rsyslog.conf (content)
@@ -37,8 +37,8 @@

 #### RULES ####
 #BEGIN Auth SETTINGS (ANSIBLE MANAGED)
-# Cron settings to meet CIS standards
-cron.*                                                   /var/log/cron
+# Private settings to meet CIS standards
+auth,authpriv.*                                          -/var/log/secure
 #END Auth SETTINGS (ANSIBLE MANAGED)
 #BEGIN LOCAL LOG SETTINGS (ANSIBLE MANAGED)
 # local log settings to meet CIS standards

TASK [RHEL8-CIS : 4.2.1.5 | PATCH | Ensure logging is configured | Cron Settings] ********************************************************************
--- before: /etc/rsyslog.conf (content)
+++ after: /etc/rsyslog.conf (content)
@@ -37,8 +37,8 @@

 #### RULES ####
 #BEGIN Auth SETTINGS (ANSIBLE MANAGED)
-# Private settings to meet CIS standards
-auth,authpriv.*                                          -/var/log/secure
+# Cron settings to meet CIS standards
+cron.*                                                   /var/log/cron
 #END Auth SETTINGS (ANSIBLE MANAGED)
 #BEGIN LOCAL LOG SETTINGS (ANSIBLE MANAGED)
 # local log settings to meet CIS standards

Expected Behavior
Both cron and auth logs configurations should exist

Control(s) Affected
4.2.1.5

Environment (please complete the following information):

Ansible Version: 2.9.27
Host Python Version: 3.6.8
Ansible Server Python Version: 3.6.8
Additional Details:

[georgenalen]

This was addressed in release 2.1.0