Files
Balamurali MandGitHub f90fba7c66 feat: Add playbooks for hardening servers (#236)
* feat(Hardening): Add playbooks for sshd hardening & warning banners

* feat(hardening): Enable ASLR & remove prelink

* feat(hardening): Add playbooks for PAM configuration

* feat(harden): Add playbook to setup AIDE

This will add cron job in cron.daily for ubuntu

* feat(hardening): Add playbook for auditd

Only package name seems to be different from centOS playbook

* feat(hardening): Add playbook to check gpg file

* feat: Add main playbook for hardening
2021-10-05 08:13:50 +05:30

4 lines
553 B
Django/Jinja

-a always,exit -F arch=b64 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=4294967295 -k access
-a always,exit -F arch=b32 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=4294967295 -k access
-a always,exit -F arch=b64 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=4294967295 -k access
-a always,exit -F arch=b32 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=4294967295 -k access