content icon indicating copy to clipboard operation
content copied to clipboard

Audit samples directory changed on `audit-4.0`

Open comps opened this issue 1 year ago • 0 comments

Description of problem:

Several places in the content reference /usr/share/audit/sample-rules:

linux_os/guide/auditing/policy_rules/audit_immutable_login_uids/rule.yml
linux_os/guide/auditing/policy_rules/audit_ospp_general/rule.yml
linux_os/guide/auditing/policy_rules/audit_ospp_general_aarch64/kubernetes/shared.yml
linux_os/guide/auditing/policy_rules/audit_ospp_general_aarch64/rule.yml
linux_os/guide/auditing/policy_rules/audit_ospp_general_ppc64le/rule.yml

This path changed on RHEL-10 (audit-4.0-*) to /usr/share/audit-rules, provided by the (installed-by-default) package audit-rules.

Details on https://github.com/linux-audit/audit-userspace/commit/eb2b95f23 .

SCAP Security Guide Version:

master @ 2facea0f0035d6f727bd33ef83bfad5839f80e4f

Operating System Version:

RHEL-10

comps avatar Oct 03 '24 10:10 comps