ff70a3750e
Disable ProtectKernelModules=true in service file Resolves: RHEL-59570 af_unix plugin: restore original behavior in binary mode Resolves: RHEL-59585 Support image mode Resolves: RHEL-69033 Resolve ordering cycle when using remote logging Resolves: RHEL-11252 Filter syscalls to ensure architecture-specific availability Resolves: RHEL-70455
15 lines
488 B
Diff
15 lines
488 B
Diff
diff --git a/init.d/auditd.service b/init.d/auditd.service
|
|
index 8210c60eb..dd7ec694b 100644
|
|
--- a/init.d/auditd.service
|
|
+++ b/init.d/auditd.service
|
|
@@ -38,7 +38,8 @@ MemoryDenyWriteExecute=true
|
|
LockPersonality=true
|
|
# The following control prevents rules on /proc so its off by default
|
|
#ProtectControlGroups=true
|
|
-ProtectKernelModules=true
|
|
+## The following control prevents rules on /usr/lib/modules/ its off by default
|
|
+#ProtectKernelModules=true
|
|
RestrictRealtime=true
|
|
|
|
[Install]
|