diff --git a/templates/osas-auditd.j2 b/templates/osas-auditd.j2 index 941980aa..5819ccc4 100644 --- a/templates/osas-auditd.j2 +++ b/templates/osas-auditd.j2 @@ -61,8 +61,12 @@ -w /etc/issue -p wa -k audit_network_modifications-V-38540 -w /etc/issue.net -p wa -k audit_network_modifications-V-38540 -w /etc/hosts -p wa -k audit_network_modifications-V-38540 +{% if ansible_os_family == "RedHat" %} +-w /etc/sysconfig/network -p wa -k audit_network_modifications-V-38540 +{% elif ansible_os_family == "Debian" %} -w /etc/network -p wa -k audit_network_modifications-V-38540 {% endif %} +{% endif %} {% if linux_security_module == 'apparmor' and security_audit_mac_changes | bool %} # RHEL 6 STIG V-38541