ansible-hardening/doc/metadata/rhel7/RHEL-07-030352.rst
Major Hayden 553ad01138 Set action_email_acct in auditd [+Docs]
This patch sets `action_email_acct` to `root` in the auditd configuration.
Deployers can customize the email recipient if needed.

Documentation is included.

Implements: blueprint security-rhel7-stig
Change-Id: Ief6e6c8c6c2139e09f1ab9c97594576a5d72701e
2016-12-08 16:23:59 -06:00

15 lines
384 B
ReStructuredText

---
id: RHEL-07-030352
status: implemented
tag: auditd
---
The ``action_mail_acct`` configuration in the audit daemon configuration file
is set to ``root`` to meet the requirements of the STIG. Deployers can
customize the recipient of the emails that come from auditd by setting the
following Ansible variable:
.. code-block:: yaml
security_rhel7_auditd_action_mail_acct: root