Configure auditd mail_acct Action on Low Disk Space
An XCCDF Rule
Description
The auditd service can be configured to send email to
a designated account in certain situations. Add or correct the following line
in /etc/audit/auditd.conf to ensure that administrators are notified
via email for those situations:
action_mail_acct =
Rationale
Email sent to the root account is typically aliased to the administrators of the system, who can take appropriate action.
- ID
- xccdf_org.ssgproject.content_rule_auditd_data_retention_action_mail_acct
- Severity
- Medium
- References
- Updated