9f3921a650
This patch configures auditd to send emails to the administrator when the `space_left` threshold is reached. Deployers can customize this setting if needed. Documentation is included. Implements: blueprint security-rhel7-stig Change-Id: I93673193b74dacb3def92b761b315eabd41cea41
17 lines
408 B
ReStructuredText
17 lines
408 B
ReStructuredText
---
|
|
id: RHEL-07-030351
|
|
status: implemented
|
|
tag: auditd
|
|
---
|
|
|
|
The ``space_left_action`` in the audit daemon configuration is set to
|
|
``email``. This configuration causes the root user to receive an email when the
|
|
``space_left`` threshold is reached.
|
|
|
|
Deployers can customize this configuration by setting the following Ansible
|
|
variable:
|
|
|
|
.. code-block:: yaml
|
|
|
|
security_rhel7_auditd_space_left_action: email
|