openstack/ansible-hardening
Code Issues Proposed changes
Files
0e8feaf9eb5265dcef8682d596e62063f7120a92
ansible-hardening/doc/metadata/rhel7/RHEL-07-030443.rst
Major Hayden 60a8205027 [Docs] Refactor auditd rules 
This patch adds documentation for:

  https://review.openstack.org/397334

Implements: blueprint security-rhel7-stig
Change-Id: I5dc47cae51321c35592451030c54b2875c46be45
2016-11-18 12:39:04 -06:00

270 B
Raw Blame History

---id: RHEL-07-030443 status: implemented tag: auditd ---

The tasks add a rule to auditd that logs each time the chcon command is used.

Deployers can opt-out of this change by setting an Ansible variable:

security_rhel7_audit_chcon: no