Prevent auditd halting machine on disk full

and updating CIS auditd variables.
Unlike RHEL9 CIS, RHEL10 and Ubuntu24 variables for auditd are not dict
formatted.
Updated them to comply the pinned version of each CIS roles.

Removed ``rhel10cis_auditd_max_log_file`` as it's no longer used by the
collection.

Author: seunghun1ee

etc/kayobe/inventory/group_vars/cis-hardening/cis

@@ -81,12 +81,11 @@ rhel9cis_rule_5_6_1_1: false
 # Rocky 10 CIS Hardening Configuration
 
 # Configure log rotation to prevent audit logs from filling the disk
-rhel10cis_auditd_action_mail_acct: root
 rhel10cis_auditd_admin_space_left_action: syslog
 rhel10cis_auditd_max_log_file_action: rotate
 rhel10cis_auditd_max_log_file_size: 1024
-rhel10cis_auditd_max_log_file: 10
 rhel10cis_auditd_space_left_action: syslog
+rhel10cis_auditd_disk_full_action: syslog
 
 # Set an authselect profile name (required)
 rhel10cis_authselect_custom_profile_name: "stack"
@@ -236,11 +235,10 @@ ubtu24cis_no_world_write_adjust: false
 ubtu24cis_suid_sgid_adjust: false
 
 # Configure log rotation to prevent audit logs from filling the disk
-ubtu24cis_auditd:
-  action_mail_acct: root
-  space_left_action: syslog
-  admin_space_left_action: syslog
-  max_log_file_action: rotate
+ubtu24cis_auditd_space_left_action: syslog
+ubtu24cis_auditd_admin_space_left_action: syslog
+ubtu24cis_auditd_max_log_file_action: rotate
+ubtu24cis_auditd_disk_full_action: syslog
 
 # Max size of audit logs (MB)
 ubtu24cis_max_log_file_size: 1024