RHEL9-CIS/templates/etc/audit/rules.d/98_auditd_exception.rules.j2

{{ file_managed_by_ansible }}
### YOUR CHANGES WILL BE LOST!

# This file contains users whose actions are not logged by auditd
{% if rhel9cis_allow_auditd_uid_user_exclusions %}
{% for user in rhel9cis_auditd_uid_exclude %}
-a never,user -F uid!={{ user }} -F auid!={{ user }}
{% endfor %}
{% endif %}
Update .j2 branding Signed-off-by: Frederick Witty <frederick.witty@gotyto.com> 2026-02-11 15:39:59 -05:00			`{{ file_managed_by_ansible }}`
updated comments Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2023-03-10 15:19:52 +00:00			`### YOUR CHANGES WILL BE LOST!`
new control option due to space on auditing Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2022-07-25 14:53:05 +01:00
			`# This file contains users whose actions are not logged by auditd`
update EOL spacing Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2023-08-08 18:53:23 +01:00			`{% if rhel9cis_allow_auditd_uid_user_exclusions %}`
updated rule Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2022-07-25 15:25:39 +01:00			`{% for user in rhel9cis_auditd_uid_exclude %}`
updated rule Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2022-07-25 16:41:57 +01:00			`-a never,user -F uid!={{ user }} -F auid!={{ user }}`
new control option due to space on auditing Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2022-07-25 14:53:05 +01:00			`{% endfor %}`
lint updates Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com> 2022-09-16 14:08:16 +01:00			`{% endif %}`