---id: V-72167 status: implemented tag: auditd ---
The tasks add a rule to auditd that logs each time the chsh command is used.
chsh
Deployers can opt-out of this change by setting an Ansible variable:
security_rhel7_audit_chsh: no