inspec/test/unit/mock/cmd/auditctl

mirror of https://github.com/inspec/inspec synced 2024-11-24 05:33:17 +00:00
-a always,exit -F arch=b64 -S open,openat -F exit=-EACCES -F key=access
-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=500 f24!=0 -F key=perm_mod
-w /etc/ssh/sshd_config -p rwxa -k CFG_sshd_config
auditd_rules: unit tests, meet the real world 2016-01-29 10:13:52 +00:00			`-a always,exit -F arch=b64 -S open,openat -F exit=-EACCES -F key=access`
			`-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=500 f24!=0 -F key=perm_mod`
auditd_rules: teach old dog new tricks 2016-01-28 16:08:41 +00:00			`-w /etc/ssh/sshd_config -p rwxa -k CFG_sshd_config`