---
id: RHEL-07-030524
status: implemented
tag: auditd
---

The tasks add a rule to auditd that logs each time the ``newgrp`` command is
used.

Deployers can opt-out of this change by setting an Ansible variable:

.. code-block:: yaml

    security_rhel7_audit_newgrp: no