Blame SOURCES/scap-security-guide-0.1.41-select_missing_arpc_for_OSPP42.patch

7629ac
From ed1f049c0c1e1f6c0aaa63b78e88229d2d25a5b6 Mon Sep 17 00:00:00 2001
7629ac
From: Watson Sato <wsato@redhat.com>
7629ac
Date: Thu, 20 Sep 2018 22:23:10 +0200
7629ac
Subject: [PATCH 1/2] Select rules for audit privileged commands
7629ac
7629ac
- crontab
7629ac
- umount
7629ac
---
7629ac
 rhel7/profiles/ospp42.profile | 2 ++
7629ac
 2 files changed, 4 insertions(+)
7629ac
7629ac
diff --git a/rhel7/profiles/ospp42.profile b/rhel7/profiles/ospp42.profile
7629ac
index 58ad10b1be..8550434ffa 100644
7629ac
--- a/rhel7/profiles/ospp42.profile
7629ac
+++ b/rhel7/profiles/ospp42.profile
7629ac
@@ -141,7 +141,9 @@ selections:
7629ac
     - audit_rules_dac_modification_lchown
7629ac
     - audit_rules_unsuccessful_file_modification_lchown
7629ac
     - audit_rules_privileged_commands_at
7629ac
+    - audit_rules_privileged_commands_crontab
7629ac
     - audit_rules_privileged_commands_mount
7629ac
+    - audit_rules_privileged_commands_umount
7629ac
     - audit_rules_privileged_commands_passwd
7629ac
     - audit_rules_privileged_commands_unix_chkpwd
7629ac
     - audit_rules_privileged_commands_userhelper