From 77027087ca451c86add5f6edc641f2aef4df560d Mon Sep 17 00:00:00 2001
From: pyllyukko <pyllyukko@maimed.org>
Date: Sun, 23 Feb 2025 12:08:54 +0200
Subject: [PATCH] Configure action_mail_acct in auditd.conf from the
 alert_email variable

---
 tasks/audit.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tasks/audit.yml b/tasks/audit.yml
index 8ec8d315..157abc14 100644
--- a/tasks/audit.yml
+++ b/tasks/audit.yml
@@ -172,7 +172,7 @@
         replace: '\1 = {{ item.value }}'
       with_dict:
         space_left_action: email
-        action_mail_acct: root
+        action_mail_acct: '{{ alert_email }}'
         max_log_file_action: keep_logs
       tags: configuration
     - name: Start & enable auditing