documentation_complete: true


title: 'Enable the auditadm_exec_content SELinux Boolean'

description: |-
    By default, the SELinux boolean <tt>auditadm_exec_content</tt> is enabled.
    If this setting is disabled, it should be enabled.
    {{{ describe_sebool_enable(sebool="auditadm_exec_content") }}}

rationale: ""

severity: medium

identifiers:
    cce@rhel8: CCE-84297-1
    cce@rhel9: CCE-84090-0
    cce@rhel10: CCE-89945-0

references:
    cui: 80424-5

{{{ complete_ocil_entry_sebool_enabled(sebool="auditadm_exec_content") }}}

template:
    name: sebool
    vars:
        seboolid: auditadm_exec_content
