From c4a61dcf947d0762bf1ae76fc8ae3993ca6a434a Mon Sep 17 00:00:00 2001 From: Samson-W Date: Sat, 24 Nov 2018 08:31:57 -0500 Subject: [PATCH] Add audit entry for 8.1.27 --- bin/hardening/8.1.27_record_Events_that_modify_conf_files.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/bin/hardening/8.1.27_record_Events_that_modify_conf_files.sh b/bin/hardening/8.1.27_record_Events_that_modify_conf_files.sh index fd6c56c..e91755c 100755 --- a/bin/hardening/8.1.27_record_Events_that_modify_conf_files.sh +++ b/bin/hardening/8.1.27_record_Events_that_modify_conf_files.sh @@ -24,7 +24,8 @@ AUDIT_PARAMS='-w /etc/audisp/audisp-remote.conf -p wa -k config_file_change -w /etc/pam.d/ -p wa -k config_file_change -w /etc/profile -p wa -k config_file_change -w /etc/profile.d/ -p wa -k config_file_change --w /etc/security/ -p wa -k config_file_change' +-w /etc/security/ -p wa -k config_file_change +-w /etc/sysctl.conf -p wa -k config_file_change' FILE='/etc/audit/rules.d/audit.rules'