tyler.durden
/
harbian-audit
mirror of https://github.com/hardenedlinux/harbian-audit.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Remove auditd item for umount syscall

This commit is contained in:
Samson-W 2018-11-22 04:19:57 -05:00
parent 45a1d8ab0b
commit 8b770013fd
1 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
bin/hardening/8.1.13_record_successful_mount.sh
View File

@ -15,8 +15,6 @@ HARDENING_LEVEL=4
AUDIT_PARAMS='-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=4294967295 -k mounts
-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=4294967295 -k mounts
-a always,exit -F arch=b64 -S umount -F auid>=1000 -F auid!=4294967295 -k mounts
-a always,exit -F arch=b32 -S umount -F auid>=1000 -F auid!=4294967295 -k mounts'
FILE='/etc/audit/rules.d/audit.rules'