blob: 4632e12e9e09d973154c504109f35024fed7d609 [file] [log] [blame]
Ivan Suzdal50a360f2018-06-04 16:07:41 +04001applications:
2- auditd
3classes:
4- service.auditd.support
5parameters:
6 auditd:
7 service:
8 enabled: true
9 log_file: /var/log/audit/audit.log
10 log_format: RAW
11 log_group: root
12 priority_boost: 4
13 flush: INCREMENTAL
14 freq: 20
15 num_logs: 5
16 disp_qos: lossy
17 dispatcher: /sbin/audispd
18 name_format: NONE
19 max_log_file: 6
20 max_log_file_action: ROTATE
21 space_left: 75
22 space_left_action: SYSLOG
23 action_mail_acct: root
24 admin_space_left: 50
25 admin_space_left_action: SUSPEND
26 disk_full_action: SUSPEND
27 disk_error_action: SUSPEND
28 tcp_listen_queue: 5
29 tcp_max_per_addr: 1
30 tcp_client_max_idle: 0
31 enable_krb5: 'no'
32 krb5_principal: auditd