Merge pull request #114 from kdebisschop/audit_5_2_3_12_logins_rules_…

…typo auditd 5.2.3.12 logins should refer to /var/run/faillock
ansible-lockdown · Nov 21, 2023 · c36172b · c36172b
2 parents fa9a9f2 + 5690f1d
commit c36172b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/audit/ubtu20cis_5_2_3_12_logins.rules.j2 b/templates/audit/ubtu20cis_5_2_3_12_logins.rules.j2
@@ -1,2 +1,2 @@
--w /var/log/faillock -p wa -k logins
+-w /var/run/faillock -p wa -k logins
 -w /var/log/lastlog -p wa -k logins