tomit4/notes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

📝 Made note on auditd

Browse source
This commit is contained in:
z3rOR0ne 2022-07-21 16:10:38 -07:00
parent 1422f7b22e
commit 9deef6c924
1 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
updates.txt
View file

@ -47,6 +47,15 @@ doas ln -s /etc/runit/sv/auditd /run/runit/service/
doas sv start auditd
Create an audit group, add $USER to it, and add audit group to /etc/audit/auditd.conf:
doas groupadd -r audit
doas gpasswd -a $USER audit
/etc/audit/auditd.conf
log_group = audit
In /etc/rc/apparmor.conf, uncomment enforce mode
In /etc/default/grub, rewrite the line at CMDLINE as such (be exact and careful here):