Blame SOURCES/scap-security-guide-0.1.41-select_missing_arpc_for_OSPP42.patch

28bffe
From ed1f049c0c1e1f6c0aaa63b78e88229d2d25a5b6 Mon Sep 17 00:00:00 2001
28bffe
From: Watson Sato <wsato@redhat.com>
28bffe
Date: Thu, 20 Sep 2018 22:23:10 +0200
28bffe
Subject: [PATCH 1/2] Select rules for audit privileged commands
28bffe
28bffe
- crontab
28bffe
- umount
28bffe
---
28bffe
 rhel7/profiles/ospp42.profile | 2 ++
28bffe
 2 files changed, 4 insertions(+)
28bffe
28bffe
diff --git a/rhel7/profiles/ospp42.profile b/rhel7/profiles/ospp42.profile
28bffe
index 58ad10b1be..8550434ffa 100644
28bffe
--- a/rhel7/profiles/ospp42.profile
28bffe
+++ b/rhel7/profiles/ospp42.profile
28bffe
@@ -141,7 +141,9 @@ selections:
28bffe
     - audit_rules_dac_modification_lchown
28bffe
     - audit_rules_unsuccessful_file_modification_lchown
28bffe
     - audit_rules_privileged_commands_at
28bffe
+    - audit_rules_privileged_commands_crontab
28bffe
     - audit_rules_privileged_commands_mount
28bffe
+    - audit_rules_privileged_commands_umount
28bffe
     - audit_rules_privileged_commands_passwd
28bffe
     - audit_rules_privileged_commands_unix_chkpwd
28bffe
     - audit_rules_privileged_commands_userhelper