Skip to content

Commit

Permalink
Added syscalls table for all arch
Browse files Browse the repository at this point in the history
  • Loading branch information
arousseau-coveo committed Jan 16, 2025
1 parent 63a05c0 commit a303ef7
Show file tree
Hide file tree
Showing 47 changed files with 23,690 additions and 4 deletions.
7 changes: 4 additions & 3 deletions tasks/auditd.yml
Original file line number Diff line number Diff line change
@@ -1,13 +1,14 @@
---

- name: POST | Apply auditd template for section 4.1.3.x
when: update_audit_template
ansible.builtin.template:
src: audit/99_auditd.rules.j2
dest: /etc/audit/rules.d/99_auditd.rules
owner: root
group: root
mode: '0640'
mode: "0640"
vars:
syscalls: "{{ lookup('file', 'audit/syscalls/table/syscall-' + ansible_architecture) }}"
register: discovered_audit_rules_updated
notify:
- Auditd rules reload
Expand All @@ -22,7 +23,7 @@
dest: /etc/audit/rules.d/98_auditd_exceptions.rules
owner: root
group: root
mode: '0600'
mode: "0600"
notify: Restart auditd

- name: POST | Flush handlers
Expand Down
2 changes: 1 addition & 1 deletion templates/audit/99_auditd.rules.j2
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
## YOUR CHANGED WILL BE LOST!

# This template will set all of the auditd configurations via a handler in the role in one task instead of individually

{{ syscalls}}
{% if ubtu22cis_rule_6_3_3_1 %}
-w /etc/sudoers -p wa -k scope
-w /etc/sudoers.d/ -p wa -k scope
Expand Down
Loading

0 comments on commit a303ef7

Please sign in to comment.