
This patch adds documentation for: https://review.openstack.org/397334 Implements: blueprint security-rhel7-stig Change-Id: I5dc47cae51321c35592451030c54b2875c46be45
16 lines
335 B
ReStructuredText
16 lines
335 B
ReStructuredText
---
|
|
id: RHEL-07-030671
|
|
status: implemented
|
|
tag: auditd
|
|
---
|
|
|
|
Rules are added to audit all ``delete_module`` syscalls on the system.
|
|
|
|
Deployers can opt out of this change by setting an Ansible variable:
|
|
|
|
.. code-block:: yaml
|
|
|
|
security_rhel7_audit_delete_module: no
|
|
|
|
This rule is compatible with x86, x86_64, and ppc64 architectures.
|