ansible-hardening/doc/metadata/rhel7/RHEL-07-030351.rst
Major Hayden 9f3921a650 Set space_left_action in auditd [+Docs]
This patch configures auditd to send emails to the administrator when the
`space_left` threshold is reached. Deployers can customize this setting if
needed.

Documentation is included.

Implements: blueprint security-rhel7-stig
Change-Id: I93673193b74dacb3def92b761b315eabd41cea41
2016-12-08 16:23:59 -06:00

408 B

---id: RHEL-07-030351 status: implemented tag: auditd ---

The space_left_action in the audit daemon configuration is set to email. This configuration causes the root user to receive an email when the space_left threshold is reached.

Deployers can customize this configuration by setting the following Ansible variable:

security_rhel7_auditd_space_left_action: email