AuditD Should Not Have Audit Rules For arch=32 on RHEL 7

Description

RHEL 7 has no 32 bit release, but we still have a bunch of auditing rules for arch=32 in the default ruleset. Unless I'm mistaken these rules won't actually do anything and only hinder auditd performance.

Acceptance Criteria

None

Activity

Show:
Trevor Vaughan
December 31, 2019, 4:45 PM

32 bit libraries are able to be loaded on 64 bit systems and therefore must be audited in case someone uses the 32-bit versions of the applications.

Labels

None

Epic Link

None

Story Points

None

Components

Affects versions

Priority

Medium
Configure