|
 |
0d5c10 |
From 6418fbbce4050ec84836b4fa6855a2699d86a6ac Mon Sep 17 00:00:00 2001
|
|
|
0d5c10 |
From: Marek Haicman <mhaicman@redhat.com>
|
|
|
0d5c10 |
Date: Mon, 20 May 2019 12:54:15 +0200
|
|
|
0d5c10 |
Subject: [PATCH] AIDE rules not applicable to containers
|
|
|
0d5c10 |
|
|
|
0d5c10 |
AIDE is tool to assess changes in the system. As containers have this capability by definition, there is no need have AIDE to duplicate it.
|
|
|
0d5c10 |
---
|
|
|
0d5c10 |
.../aide/aide_periodic_cron_checking/rule.yml | 2 --
|
|
|
0d5c10 |
.../system/software/integrity/software-integrity/aide/group.yml | 2 ++
|
|
|
0d5c10 |
2 files changed, 2 insertions(+), 2 deletions(-)
|
|
|
0d5c10 |
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_cron_checking/rule.yml b/linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_cron_checking/rule.yml
|
|
|
0d5c10 |
index 7fc8d96b04..68ea7937bd 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_cron_checking/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/integrity/software-integrity/aide/aide_periodic_cron_checking/rule.yml
|
|
|
0d5c10 |
@@ -63,5 +63,3 @@ ocil: |-
|
|
|
0d5c10 |
05 4 * * * root /usr/sbin/aide --check
|
|
|
0d5c10 |
|
|
|
0d5c10 |
NOTE: The usage of special cron times, such as @daily or @weekly, is acceptable.
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
-platform: machine
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/integrity/software-integrity/aide/group.yml b/linux_os/guide/system/software/integrity/software-integrity/aide/group.yml
|
|
|
0d5c10 |
index 69d2f0fb56..faa2458657 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/integrity/software-integrity/aide/group.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/integrity/software-integrity/aide/group.yml
|
|
|
0d5c10 |
@@ -8,3 +8,5 @@ description: |-
|
|
|
0d5c10 |
created immediately after initial system configuration, and then again after any
|
|
|
0d5c10 |
software update. AIDE is highly configurable, with further configuration
|
|
|
0d5c10 |
information located in <tt>/usr/share/doc/aide-VERSION</tt>.
|
|
|
0d5c10 |
+
|
|
|
0d5c10 |
+platform: machine
|