Fix RHEL-08-030121

Need to set in rules.d/audit.rules to persist. Signed-off-by: Dan Barr <[email protected]>
ansible-lockdown · May 19, 2021 · 18f7b1b · 18f7b1b
1 parent 9e6ebb6
commit 18f7b1b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tasks/fix-cat2.yml b/tasks/fix-cat2.yml
@@ -3350,7 +3350,7 @@
 
 - name: "MEDIUM | RHEL-08-030121 | PATCH | RHEL 8 audit system must protect auditing rules from unauthorized change."
   lineinfile:
-      path: /etc/audit/audit.rules
+      path: /etc/audit/rules.d/audit.rules
       regexp: '^-e '
       line: "-e 2"
   when: