Skip to content

Commit

Permalink
Update audit.rules
Browse files Browse the repository at this point in the history
  • Loading branch information
Pierre-Gronau-ndaal committed Jun 25, 2023
1 parent 8173f0b commit ea09929
Showing 1 changed file with 9 additions and 0 deletions.
9 changes: 9 additions & 0 deletions audit.rules
Original file line number Diff line number Diff line change
Expand Up @@ -264,6 +264,15 @@
-w /etc/systemd/ -p wa -k systemd
-w /usr/lib/systemd -p wa -k systemd

## https://systemd.network/systemd.generator.html
-w /etc/systemd/system-generators/ -p wa -k T1543_Create_or_Modify_System_Process_systemd_generator
-w /usr/local/lib/systemd/system-generators/ -p wa -k T1543_Create_or_Modify_System_Process_systemd_generator
-w /usr/lib/systemd/system-generators -p wa -k T1543_Create_or_Modify_System_Process_systemd_generator

-w /etc/systemd/user-generators/ -p wa -k T1543_Create_or_Modify_System_Process_systemd_generator
-w /usr/local/lib/systemd/user-generators/ -p wa -k T1543_Create_or_Modify_System_Process_systemd_generator
-w /lib/systemd/system-generators/ -p wa -k T1543_Create_or_Modify_System_Process_systemd_generator

## SELinux events that modify the system's Mandatory Access Controls (MAC)
-w /etc/selinux/ -p wa -k mac_policy

Expand Down

0 comments on commit ea09929

Please sign in to comment.