openstack/openstack-ansible-security
Code Issues Proposed changes

Merge "Enable/start auditd [+Docs]"

Browse Source
This commit is contained in:
Jenkins
2016-12-08 14:34:52 +00:00
committed by Gerrit Code Review
parent 78e594113a 439cd3d776
commit 08b1421fcf
2 changed files with 16 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
doc/metadata/rhel7/RHEL-07-030010.rst
View File

@@ -1,7 +1,8 @@
---
id: RHEL-07-030010
status: not implemented
tag: misc
status: implemented
tag: auditd
---
This STIG requirement is not yet implemented.
The tasks in the security role start the audit daemon immediately and ensure
that it starts at boot time.

12
tasks/rhel7stig/auditd.yml
View File

@@ -134,3 +134,15 @@
- RHEL-07-030674
- RHEL-07-030710
- RHEL-07-030090
- name: Ensure auditd is running and enabled at boot time
service:
name: auditd
state: started
enabled: yes
when:
- auditd_conf.stat.exists
tags:
- high
- auditd
- RHEL-07-030010