Add audit item for iptables save path

2018-11-28 07:52:29 -05:00 · 2018-11-28 07:52:29 -05:00 · 17fff469b2
parent 94c467485e
commit 17fff469b2
1 changed files with 1 additions and 0 deletions
--- a/bin/hardening/8.1.27_record_Events_that_modify_conf_files.sh
+++ b/bin/hardening/8.1.27_record_Events_that_modify_conf_files.sh
@ -25,6 +25,7 @@ AUDIT_PARAMS='-w /etc/audisp/audisp-remote.conf -p wa -k config_file_change
 -w /etc/profile -p wa -k config_file_change
 -w /etc/profile.d/ -p wa -k config_file_change
 -w /etc/security/ -p wa -k config_file_change
+-w /etc/iptables/ -p wa -k config_file_change
 -w /etc/sysctl.conf -p wa -k config_file_change'

 FILE='/etc/audit/rules.d/audit.rules'