ansible-hardening/doc/metadata/rhel7/V-72205.rst

---id: V-72205 status: implemented tag: auditd ---

The tasks add a rule to auditd that logs each time the unlink command is used.

Deployers can opt-out of this change by setting an Ansible variable:

security_rhel7_audit_unlink: no

This rule is compatible with x86, x86_64, and ppc64 architectures.