Files
ansible-hardening/doc/metadata/rhel7/RHEL-07-030671.rst
Major Hayden 60a8205027 [Docs] Refactor auditd rules
This patch adds documentation for:

  https://review.openstack.org/397334

Implements: blueprint security-rhel7-stig
Change-Id: I5dc47cae51321c35592451030c54b2875c46be45
2016-11-18 12:39:04 -06:00

16 lines
335 B
ReStructuredText

---
id: RHEL-07-030671
status: implemented
tag: auditd
---
Rules are added to audit all ``delete_module`` syscalls on the system.
Deployers can opt out of this change by setting an Ansible variable:
.. code-block:: yaml
security_rhel7_audit_delete_module: no
This rule is compatible with x86, x86_64, and ppc64 architectures.