---id: V-72133 status: implemented tag: auditd ---
Rules are added to audit all ftruncate syscalls on the system.
ftruncate
Deployers can opt out of this change by setting an Ansible variable:
security_rhel7_audit_ftruncate: no
This rule is compatible with x86, x86_64, and ppc64 architectures.