RHEL9-CIS/templates/audit/98_auditd_exception.rules.j2

## Ansible controlled file
# Added as part of ansible-lockdown CIS baseline
# provided by Mindpoint Group - A Tyto Athene Company / Ansible Lockdown
### YOUR CHANGES WILL BE LOST!

# This file contains users whose actions are not logged by auditd
{% if rhel9cis_allow_auditd_uid_user_exclusions %}
{% for user in rhel9cis_auditd_uid_exclude %}
-a never,user -F uid!={{ user }} -F auid!={{ user }}
{% endfor %}
{% endif %}