diff --git a/doc/metadata/rhel7/RHEL-07-030010.rst b/doc/metadata/rhel7/RHEL-07-030010.rst index a2ba0cbd..27973ff3 100644 --- a/doc/metadata/rhel7/RHEL-07-030010.rst +++ b/doc/metadata/rhel7/RHEL-07-030010.rst @@ -1,7 +1,8 @@ --- id: RHEL-07-030010 -status: not implemented -tag: misc +status: implemented +tag: auditd --- -This STIG requirement is not yet implemented. +The tasks in the security role start the audit daemon immediately and ensure +that it starts at boot time. diff --git a/tasks/rhel7stig/auditd.yml b/tasks/rhel7stig/auditd.yml index 62a90fd4..157708dd 100644 --- a/tasks/rhel7stig/auditd.yml +++ b/tasks/rhel7stig/auditd.yml @@ -134,3 +134,15 @@ - RHEL-07-030674 - RHEL-07-030710 - RHEL-07-030090 + +- name: Ensure auditd is running and enabled at boot time + service: + name: auditd + state: started + enabled: yes + when: + - auditd_conf.stat.exists + tags: + - high + - auditd + - RHEL-07-030010