mirror of
https://github.com/hanzo-io/cloud.git
synced 2026-10-30 18:57:42 +00:00
Balamurali MandGitHub
f90fba7c66
* feat(Hardening): Add playbooks for sshd hardening & warning banners * feat(hardening): Enable ASLR & remove prelink * feat(hardening): Add playbooks for PAM configuration * feat(harden): Add playbook to setup AIDE This will add cron job in cron.daily for ubuntu * feat(hardening): Add playbook for auditd Only package name seems to be different from centOS playbook * feat(hardening): Add playbook to check gpg file * feat: Add main playbook for hardening
6 lines
751 B
Django/Jinja
6 lines
751 B
Django/Jinja
-a always,exit -F arch=b64 -S chmod -S fchmod -S fchmodat -F auid>=1000 -F auid!=4294967295 -k perm_mod
|
|
-a always,exit -F arch=b32 -S chmod -S fchmod -S fchmodat -F auid>=1000 -F auid!=4294967295 -k perm_mod
|
|
-a always,exit -F arch=b64 -S chown -S fchown -S fchownat -S lchown -F auid>=1000 -F auid!=4294967295 -k perm_mod
|
|
-a always,exit -F arch=b32 -S chown -S fchown -S fchownat -S lchown -F auid>=1000 -F auid!=4294967295 -k perm_mod
|
|
-a always,exit -F arch=b64 -S setxattr -S lsetxattr -S fsetxattr -S removexattr -S lremovexattr -S fremovexattr -F auid>=1000 -F auid!=4294967295 -k perm_mod
|
|
-a always,exit -F arch=b32 -S setxattr -S lsetxattr -S fsetxattr -S removexattr -S lremovexattr -S fremovexattr -F auid>=1000 -F auid!=4294967295 -k perm_mod |