Configure auditd space_left on Low Disk Space
An XCCDF Rule
Description
The auditd service can be configured to take an action
when disk space is running low but prior to running out of space completely.
Edit the file /etc/audit/auditd.conf. Add or modify the following line,
substituting SIZE_in_MB appropriately:
space_left = SIZE_in_MB
Set this value to the appropriate size in Megabytes cause the system to
notify the user of an issue.
Rationale
Notifying administrators of an impending disk space problem may allow them to take corrective action prior to any disruption.
- ID
- xccdf_org.ssgproject.content_rule_auditd_data_retention_space_left
- Severity
- Medium
- References
- Updated