An XCCDF Group - A logical subset of the XCCDF Benchmark
/var/log/audit/audit.log
auditd
/var/log/audit
/var
/etc/audit/auditd.conf
action_mail_acct =
admin_space_left_action = ACTION
single
suspend
halt
auditd.conf
max_log_file = STOREMB
6
max_log_file_action = ACTION
ignore
syslog
rotate
keep_logs
ACTION
space_left_action = ACTION
email
exec