Merge pull request #107 from Pierre-Gronau-ndaal/patch-46

Update audit.rules setfiles
Neo23x0 · Feb 5, 2024 · 984a6dd · 984a6dd
2 parents 7c938fc + 7140cd8
commit 984a6dd
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/audit.rules b/audit.rules
@@ -406,6 +406,10 @@
 -w /usr/bin/dbus-send -p x -k dbus_send
 -w /usr/bin/gdbus -p x -k gdubs_call
 
+## setfiles
+-a always,exit -F path=/usr/bin/setfiles -F perm=x -F auid>=500 -F auid!=4294967295 -k -F T1078_Valid_Accounts
+-a always,exit -F path=/usr/sbin/setfiles -F perm=x -F auid>=500 -F auid!=4294967295 -k -F T1078_Valid_Accounts
+
 ### dbus
 -a always,exit -F path=/lib64/dbus-1/dbus-daemon-launch-helper -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts
 -a always,exit -F path=/usr/lib64/dbus-1/dbus-daemon-launch-helper -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts