RH-SSO does not audit the changes performed in the audit configuration itself
Issue
- When login event settings and/or admin event settings are modified, no audit events are produced. This means someone can turn off all events and there would be no record of them doing so.
Environment
- Red Hat Single Sign-On (RH-SSO)
- 7
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.