From ed1f049c0c1e1f6c0aaa63b78e88229d2d25a5b6 Mon Sep 17 00:00:00 2001 From: Watson Sato Date: Thu, 20 Sep 2018 22:23:10 +0200 Subject: [PATCH 1/2] Select rules for audit privileged commands - crontab - umount --- rhel7/profiles/ospp42.profile | 2 ++ 2 files changed, 4 insertions(+) diff --git a/rhel7/profiles/ospp42.profile b/rhel7/profiles/ospp42.profile index 58ad10b1be..8550434ffa 100644 --- a/rhel7/profiles/ospp42.profile +++ b/rhel7/profiles/ospp42.profile @@ -141,7 +141,9 @@ selections: - audit_rules_dac_modification_lchown - audit_rules_unsuccessful_file_modification_lchown - audit_rules_privileged_commands_at + - audit_rules_privileged_commands_crontab - audit_rules_privileged_commands_mount + - audit_rules_privileged_commands_umount - audit_rules_privileged_commands_passwd - audit_rules_privileged_commands_unix_chkpwd - audit_rules_privileged_commands_userhelper