updated rule

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-07-25 16:41:57 +01:00
parent 3c66b3f83c
commit 9c2fead5fc
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB

View file

@ -3,6 +3,6 @@
# This file contains users whose actions are not logged by auditd
{% if allow_auditd_uid_user_exclusions %}
{% for user in rhel9cis_auditd_uid_exclude %}
-F uid!={{ user }}
-a never,user -F uid!={{ user }} -F auid!={{ user }}
{% endfor %}
{% endif %}