Remove Splunk additions

[arcsector]

Adding some removals to remove_splunk.yml for better cleanup:

• User and Group
• THP/Ulimit files & services
• Dmesg files
• Firewall files and entries
• FACL files and lineinfile's

[arcsector]

Wanted to note that I was going to include the removal of the polkits from 41b2a8e, however we have to reload dbus to do that, and in my tests it's very precarious reloading dbus, sometimes resulting in a kernel panic from crashing dbus, and so I left it out until someone more experienced with that can take that on.

[jewnix]

I actually have a local branch to remove the user and group for a while 😄 , I just didn't push it

[dtwersky]

Wanted to note that I was going to include the removal of the polkits from 41b2a8e, however we have to reload dbus to do that, and in my tests it's very precarious reloading dbus, sometimes resulting in a kernel panic from crashing dbus, and so I left it out until someone more experienced with that can take that on.

when you run disable boot-start it should remove the polkit as well. At least that's the expected behavior.

[arcsector]

@jewnix in some of my tests on RHEL procps doesn't exist as a service - is this the same for you? Should we add a conditional for debian machines only?

[jewnix]

@jewnix in some of my tests on RHEL procps doesn't exist as a service - is this the same for you? Should we add a conditional for debian machines only?

@arcsector you would be correct. I have not seen procps on RHEL based systems. In general, I've only seen dmesg disabled on Debian based systems, but it would be a good idea to add a conditional for ansible_os_family on at least the restart of this service, if not on the whole task.

[arcsector]

it would be a good idea to add a conditional for ansible_os_family on at least the restart of this service, if not on the whole task.

Gotcha. Separate PR for sure.