ansible-hardening/doc/metadata/rhel7/V-72137.rst

254 B

---id: V-72137 status: implemented tag: auditd ---

Rules are added to audit any time the setsebool command is used.

Deployers can opt out of this change by setting an Ansible variable:

security_rhel7_audit_setsebool: no