Merge pull request #440 from konstruktoid/audit

rewrite audit rules
konstruktoid · Dec 6, 2023 · a5cdadb · a5cdadb
2 parents 34cf889 + 050f20f
commit a5cdadb
Show file tree

Hide file tree

Showing 2 changed files with 329 additions and 312 deletions.
diff --git a/defaults/main/auditd.yml b/defaults/main/auditd.yml
@@ -4,7 +4,7 @@ auditd_action_mail_acct: root
 auditd_admin_space_left_action: suspend
 auditd_disk_error_action: suspend
 auditd_disk_full_action: suspend
-auditd_flush: sync
+auditd_flush: incremental_async
 auditd_max_log_file: 20
 auditd_max_log_file_action: rotate
 auditd_mode: 1