ansible-hardening/doc/metadata/rhel7/V-72189.rst

328 B

---id: V-72189 status: implemented tag: auditd ---

Rules are added to audit all delete_module syscalls on the system.

Deployers can opt out of this change by setting an Ansible variable:

security_rhel7_audit_delete_module: no

This rule is compatible with x86, x86_64, and ppc64 architectures.