sunjizzle/diskless-workstation
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Change email notification to syslog

Browse Source
This commit is contained in:
Audiobuzz
2026-06-20 14:50:40 +09:30
parent b67a23e718
commit 9b0d4a61ea
4 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
files/stig/diskless-tailoring.xml
+5
View File
@@ -144,6 +144,11 @@
notification is via remote offload, not email) -> the rule that
requires postfix installed becomes N/A. -->
<xccdf:select idref="xccdf_org.ssgproject.content_rule_package_postfix_installed" selected="false"/>
<!-- Consequence of removing postfix: auditd's STIG space_left_action=email
has no MTA, so it's repointed to SYSLOG (alert rides the remote audit
offload). This rule wants 'email', so waive it. admin_space_left_action
stays 'single' (unaffected). See #12. -->
<xccdf:select idref="xccdf_org.ssgproject.content_rule_auditd_data_retention_space_left_action" selected="false"/>
<!-- USBGuard (decision: ENABLE with a hardware-independent allowlist).
usbguard is already installed + the service enabled, but its policy was