You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Jun 30, 2021. It is now read-only.
When configuring multiple rules using the auditd::rules attribute it would be great to see the rule name make its way into the config file or at least be a configurable option. That way you would be able to see the purpose of a rule in the config file.
So for example:
class { 'auditd':
rules => {
'time auditing' => {
content => '-a always,exit -F arch=b64 -S adjtimex -S settimeofday -k time-change -a always,exit -F arch=b32 -S adjtimex -S settimeofday -S stime -k time-change -a always,exit -F arch=b64 -S clock_settime -k time-change -a always,exit -F arch=b32 -S clock_settime -k time-change -w /etc/localtime -p wa -k time-change',
order => 1,
},
'password stuff' => {
content => '-w /etc/group -p wa -k identity',
order => 2,
}
}
}
Will result in:
# Puppet Managed Custom rules begin here:
-a always,exit -F arch=b64 -S adjtimex -S settimeofday -k time-change -a always,exit -F arch=b32 -S adjtimex -S settimeofday -S stime -k time-change -a always,exit -F arch=b64 -S clock_settime -k time-change -a always,exit -F arch=b32 -S clock_settime -k time-change -w /etc/localtime -p wa -k time-change
-w /etc/group -p wa -k identity
The text was updated successfully, but these errors were encountered:
When configuring multiple rules using the auditd::rules attribute it would be great to see the rule name make its way into the config file or at least be a configurable option. That way you would be able to see the purpose of a rule in the config file.
So for example:
Will result in:
The text was updated successfully, but these errors were encountered: