rpms/audit
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Enable default RHEL configuration

Browse Source 
This enables syscall auditing by default.

Resolves: rhbz#1924561
This commit is contained in:
Sergio Correia 2021-06-21 11:12:29 -03:00
parent 49f695c2b1
commit b7bafe97c3
No known key found for this signature in database
GPG Key ID: D0D219ED1F7E762C
1 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
audit.spec
View File

@ -2,7 +2,7 @@
Summary: User space tools for kernel auditing
Name: audit
Version: 3.0.1
Release: 3%{?dist}
Release: 4%{?dist}
License: GPLv2+
URL: http://people.redhat.com/sgrubb/audit/
Source0: http://people.redhat.com/sgrubb/audit/%{name}-%{version}.tar.gz
@ -144,9 +144,8 @@ rm -f rules/Makefile*
# Copy default rules into place on new installation
files=`ls /etc/audit/rules.d/ 2>/dev/null | wc -w`
if [ "$files" -eq 0 ] ; then
# FESCO asked for audit to be off by default. #1117953
if [ -e %{_datadir}/%{name}/sample-rules/10-no-audit.rules ] ; then
cp %{_datadir}/%{name}/sample-rules/10-no-audit.rules /etc/audit/rules.d/audit.rules
if [ -e %{_datadir}/%{name}/sample-rules/10-base-config.rules ] ; then
cp %{_datadir}/%{name}/sample-rules/10-base-config.rules /etc/audit/rules.d/audit.rules
else
touch /etc/audit/rules.d/audit.rules
fi
@ -260,6 +259,11 @@ fi
%attr(750,root,root) /sbin/audispd-zos-remote
%changelog
* Mon Jun 21 2021 Sergio Correia <scorreia@redhat.com> - 3.0.1-4
- Enable default RHEL configuration
This enables syscall auditing by default.
Resolves: rhbz#1924561
* Thu Apr 15 2021 Mohan Boddu <mboddu@redhat.com> - 3.0.1-3
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937