Files
ansible-linux-infra/roles/cis_hardening/templates/audit-baseline.rules.j2
2026-08-19 09:51:43 +02:00

20 lines
470 B
Django/Jinja

# {{ ansible_managed }}
-D
-b 8192
-w /var/log/lastlog -p wa -k logins
-w /var/run/faillock -p wa -k logins
-a always,exit -F arch=b64 -S adjtimex,settimeofday,clock_settime -k time-change
-w /etc/localtime -p wa -k time-change
-w /etc/passwd -p wa -k identity
-w /etc/group -p wa -k identity
-w /etc/shadow -p wa -k identity
-w /etc/sudoers -p wa -k identity
-w /etc/sudoers.d/ -p wa -k identity
-w /home/{{ breakglass_username }} -p rwxa -k breakglass-usage
-e 2