forked from pool/audit
1b5f7ae8b7
- Create separate service for augenrules (bsc#1191614, bsc#1181400) * add create-augenrules-service.patch Remove ReadWritePaths=/etc/audit from auditd.service, also removes augenrules call from ExecStartPost. Create augenrules.service with the ReadWritePaths directive above. This makes /etc/audit only accessible by augenrules.service and let auditd.service (and daemon) to be sandboxed again. - Update audit-secondary.spec to accomodate the new service file. OBS-URL: https://build.opensuse.org/request/show/925195 OBS-URL: https://build.opensuse.org/package/show/security/audit?expand=0&rev=131 |
||
---|---|---|
.gitattributes | ||
.gitignore | ||
audit-3.0.5.tar.gz | ||
audit-allow-manual-stop.patch | ||
audit-ausearch-do-not-require-tclass.patch | ||
audit-no-gss.patch | ||
audit-plugins-path.patch | ||
audit-secondary.changes | ||
audit-secondary.spec | ||
audit.changes | ||
audit.spec | ||
baselibs.conf | ||
change-default-log_format.patch | ||
change-default-log_group.patch | ||
create-augenrules-service.patch | ||
enable-stop-rules.patch | ||
fix-hardened-service.patch | ||
harden_auditd.service.patch | ||
libev-werror.patch | ||
README-BEFORE-ADDING-PATCHES | ||
system-group-audit.conf |