Files
ansible-hardening/doc/metadata/rhel6/V-38575.rst
Major Hayden 3c19f00a7f [Docs] Metadata cleanup
This patch adds the right tags to each piece of metadata and corrects
small errors found in the deployer notes.

Closes-bug: 1595669
Change-Id: Ic04aaad85ebf111be5a0bdb01a350442fdea1433
2016-09-12 14:27:49 -05:00

456 B

---id: V-38575 status: opt-in tag: auditd ---

The audit rules for monitoring deleted files can cause very high system load during OpenStack-Ansible deployments and during package updates using apt. It's recommended that deployers keep these rules disabled unless they're explicitly required.

These rules are disabled by default, but they can be enabled by setting the following Ansible variable:

security_audit_deletions: yes