Initial commit

[ta/infra-ansible.git] / roles / audit / templates / 11-loginuid.rules.j2

diff --git a/roles/audit/templates/11-loginuid.rules.j2 b/roles/audit/templates/11-loginuid.rules.j2
new file mode 100644 (file)
index 0000000..b4cf8c6
--- /dev/null
+++ b/roles/audit/templates/11-loginuid.rules.j2
@@ -0,0 +1,2 @@
+## Make the loginuid immutable. This prevents tampering with the auid.
+--loginuid-immutable