Configure action_mail_acct in auditd.conf from the alert_email variable

pyllyukko · Feb 23, 2025 · 7702708 · 7702708
1 parent b6963cf
commit 7702708
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tasks/audit.yml b/tasks/audit.yml
@@ -172,7 +172,7 @@
         replace: '\1 = {{ item.value }}'
       with_dict:
         space_left_action: email
-        action_mail_acct: root
+        action_mail_acct: '{{ alert_email }}'
         max_log_file_action: keep_logs
       tags: configuration
     - name: Start & enable auditing