ansible-hardening/doc/metadata/rhel7/V-72091.rst

---id: V-72091 status: implemented tag: auditd ---

The space_left_action in the audit daemon configuration is set to email. This configuration causes the root user to receive an email when the space_left threshold is reached.

Deployers can customize this configuration by setting the following Ansible variable:

security_rhel7_auditd_space_left_action: email