openstack/ansible-hardening
Code Issues Proposed changes
Files
770b2ad86e5e188ea2fd415ef7a6f8e418bb315a
ansible-hardening/doc/metadata/rhel7/RHEL-07-030710.rst
Major Hayden 1335d0b0df [Docs] Audit rules 
This patch adds documentation for the audit rule changes found in:

  https://review.openstack.org/395783

Implements: blueprint security-rhel7-stig
Change-Id: I7e30f10fa0a80824cca70c6a4d77488d28573f92
2016-11-10 19:31:31 +00:00

425 B
Raw Blame History

---id: RHEL-07-030710 status: implemented tag: auditd ---

The tasks add a rule to auditd that logs each time that an account is modified. This includes changes to the following files:

  • /etc/group
  • /etc/passwd
  • /etc/gshadow
  • /etc/shadow
  • /etc/security/opasswd

Deployers can opt-out of this change by setting an Ansible variable:

security_rhel7_audit_account_actions: no