ansible-hardening/doc/metadata/rhel7/RHEL-07-030352.rst
Major Hayden 553ad01138 Set action_email_acct in auditd [+Docs]
This patch sets `action_email_acct` to `root` in the auditd configuration.
Deployers can customize the email recipient if needed.

Documentation is included.

Implements: blueprint security-rhel7-stig
Change-Id: Ief6e6c8c6c2139e09f1ab9c97594576a5d72701e
2016-12-08 16:23:59 -06:00

384 B

---id: RHEL-07-030352 status: implemented tag: auditd ---

The action_mail_acct configuration in the audit daemon configuration file is set to root to meet the requirements of the STIG. Deployers can customize the recipient of the emails that come from auditd by setting the following Ansible variable:

security_rhel7_auditd_action_mail_acct: root