audit/disable-protectkernmelmodules.patch
Cropi ff70a3750e c9s bugfix
Disable ProtectKernelModules=true in service file
  Resolves: RHEL-59570
af_unix plugin: restore original behavior in binary mode
  Resolves: RHEL-59585
Support image mode
  Resolves: RHEL-69033
Resolve ordering cycle when using remote logging
  Resolves: RHEL-11252
Filter syscalls to ensure architecture-specific availability
  Resolves: RHEL-70455
2025-01-15 10:03:09 +01:00

15 lines
488 B
Diff

diff --git a/init.d/auditd.service b/init.d/auditd.service
index 8210c60eb..dd7ec694b 100644
--- a/init.d/auditd.service
+++ b/init.d/auditd.service
@@ -38,7 +38,8 @@ MemoryDenyWriteExecute=true
LockPersonality=true
# The following control prevents rules on /proc so its off by default
#ProtectControlGroups=true
-ProtectKernelModules=true
+## The following control prevents rules on /usr/lib/modules/ its off by default
+#ProtectKernelModules=true
RestrictRealtime=true
[Install]