mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-24 22:23:06 +00:00
new control option due to space on auditing
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
parent
595b952089
commit
d3f2677fd5
2 changed files with 19 additions and 0 deletions
8
templates/audit/98_auditd_exception.rules.j2
Normal file
8
templates/audit/98_auditd_exception.rules.j2
Normal file
|
|
@ -0,0 +1,8 @@
|
|||
## This file is managed by Ansible, YOUR CHANGED WILL BE LOST!
|
||||
|
||||
# This file contains users whose actions are not logged by auditd
|
||||
{% if allow_auditd_uid_user_exclusions %}
|
||||
{% for user in rhel8cis_auditd_uid_exclude %}
|
||||
-F uid!={{ user }}
|
||||
{% endfor %}
|
||||
{% endif %}
|
||||
Loading…
Add table
Add a link
Reference in a new issue