ansible-hardening/doc/metadata/rhel7/V-72187.rst

16 lines
324 B
ReStructuredText

---
id: V-72187
status: implemented
tag: auditd
---
Rules are added to audit all ``init_module`` syscalls on the system.
Deployers can opt out of this change by setting an Ansible variable:
.. code-block:: yaml
security_rhel7_audit_init_module: no
This rule is compatible with x86, x86_64, and ppc64 architectures.