From a783b7fb2529e3bbc9b6c8d8d99f3f798dd4c4f2 Mon Sep 17 00:00:00 2001
From: Miha Purg <miha.purg@canonical.com>
Date: Tue, 13 Feb 2024 22:22:53 +0100
Subject: [PATCH] Fix description for auditd_max_log_file_action

Replace hardcoded value 'rotate' with variable var_auditd_max_log_file_action.
---
 .../auditd_data_retention_max_log_file_action/rule.yml        | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/linux_os/guide/system/auditing/configure_auditd_data_retention/auditd_data_retention_max_log_file_action/rule.yml b/linux_os/guide/system/auditing/configure_auditd_data_retention/auditd_data_retention_max_log_file_action/rule.yml
index 7f008d1f9cb..1f6050a4b19 100644
--- a/linux_os/guide/system/auditing/configure_auditd_data_retention/auditd_data_retention_max_log_file_action/rule.yml
+++ b/linux_os/guide/system/auditing/configure_auditd_data_retention/auditd_data_retention_max_log_file_action/rule.yml
@@ -16,8 +16,8 @@ description: |-
     <li><tt>rotate</tt></li>
     <li><tt>keep_logs</tt></li>
     </ul>
-    Set the <tt><i>ACTION</i></tt> to <tt>rotate</tt> to ensure log rotation
-    occurs. This is the default. The setting is case-insensitive.
+    Set the <tt><i>ACTION</i></tt> to <tt>{{{ xccdf_value("var_auditd_max_log_file_action") }}}</tt>.
+    The setting is case-insensitive.
 
 rationale: |-
     Automatically rotating logs (by setting this to <tt>rotate</tt>)