Skip to content
This repository has been archived by the owner on Jun 30, 2021. It is now read-only.

Include rules title in config file #49

Open
ggeldenhuis opened this issue Aug 20, 2018 · 1 comment
Open

Include rules title in config file #49

ggeldenhuis opened this issue Aug 20, 2018 · 1 comment

Comments

@ggeldenhuis
Copy link

When configuring multiple rules using the auditd::rules attribute it would be great to see the rule name make its way into the config file or at least be a configurable option. That way you would be able to see the purpose of a rule in the config file.
So for example:

  class { 'auditd': 
    rules => {
      'time auditing' => {
        content => '-a always,exit -F arch=b64 -S adjtimex -S settimeofday -k time-change -a always,exit -F arch=b32 -S adjtimex -S settimeofday -S stime -k time-change -a always,exit -F arch=b64 -S clock_settime -k time-change -a always,exit -F arch=b32 -S clock_settime -k time-change -w /etc/localtime -p wa -k time-change', 
        order   => 1,
      },
      'password stuff' => {
        content => '-w /etc/group -p wa -k identity',
        order   => 2,
      } 
    }
  }

Will result in:

# Puppet Managed Custom rules begin here:
-a always,exit -F arch=b64 -S adjtimex -S settimeofday -k time-change -a always,exit -F arch=b32 -S adjtimex -S settimeofday -S stime -k time-change -a always,exit -F arch=b64 -S clock_settime -k time-change -a always,exit -F arch=b32 -S clock_settime -k time-change -w /etc/localtime -p wa -k time-change
-w /etc/group -p wa -k identity
@alexjfisher
Copy link

I created #59 which might meet your need?

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants