sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

Exentsion to auditd

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-10-14 12:29:06 +01:00
parent acdb56a277
commit 1d96539637
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB
2 changed files with 23 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
defaults/main.yml
View file

@ -508,6 +508,13 @@ update_audit_template: false
## Advanced option found in auditd post
allow_auditd_uid_user_exclusions: false
# This can be used to configure other keys in auditd.conf
rhel9cis_auditd_extra_conf: {}
# Example:
# rhel9cis_auditd_extra_conf:
# admin_space_left: '10%'
## Preferred method of logging
## Whether rsyslog or journald preferred method for local logging
## Affects rsyslog cis 4.2.1.3 and journald cis 4.2.2.5