tyler.durden
/
harbian-audit
mirror of https://github.com/hardenedlinux/harbian-audit.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Modify description for 8.1.27

This commit is contained in:
samson 2018-11-28 20:56:07 +08:00
parent 17fff469b2
commit 043b309d44
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/harbian_audit_Debian_9_Benchmark_v0.1.mkd
View File

@ -837,6 +837,7 @@ Verify the operating system generates audit records that modify configuration. C
-w /etc/profile -p wa -k config_file_change -w /etc/profile -p wa -k config_file_change
-w /etc/profile.d/ -p wa -k config_file_change -w /etc/profile.d/ -p wa -k config_file_change
-w /etc/security/ -p wa -k config_file_change -w /etc/security/ -p wa -k config_file_change
-w /etc/iptables/ -p wa -k config_file_change
-w /etc/sysctl.conf -p wa -k config_file_change -w /etc/sysctl.conf -p wa -k config_file_change
``` ```
If the command does not return any output, this is a finding. If the command does not return any output, this is a finding.
@ -855,6 +856,7 @@ Fixtext: Configure the operating system to generate audit records that modify co
-w /etc/profile -p wa -k config_file_change -w /etc/profile -p wa -k config_file_change
-w /etc/profile.d/ -p wa -k config_file_change -w /etc/profile.d/ -p wa -k config_file_change
-w /etc/security/ -p wa -k config_file_change -w /etc/security/ -p wa -k config_file_change
-w /etc/iptables/ -p wa -k config_file_change
-w /etc/sysctl.conf -p wa -k config_file_change -w /etc/sysctl.conf -p wa -k config_file_change
``` ```
The audit daemon must be restarted for the changes to take effect. The audit daemon must be restarted for the changes to take effect.