Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add note related to 'never,task' rule in auditd #7291

Merged
merged 2 commits into from May 10, 2024

Conversation

jotacarma90
Copy link
Member

@jotacarma90 jotacarma90 commented May 6, 2024

Description

In this PR we are adding a note in the advanced settings of FIM to warn that in some systems auditd comes by default with a rule that prevents Wazuh (and any other process) of the audit rules from working properly.

Checks

Docs building

  • Compiles without warnings.

Code formatting and web optimization

  • Uses three spaces indentation.
  • Adds or updates meta descriptions accordingly.
  • Updates the redirects.js script if necessary (check this guide).

Writing style

  • Uses present tense, active voice, and semi-formal registry.
  • Uses short, simple sentences.
  • Uses bold for user interface elements, italics for key terms or emphasis, and code font for Bash commands, file names, REST paths, and code.

@jotacarma90 jotacarma90 force-pushed the add/7283-audit-never-task-rule branch from 098fffc to c73b616 Compare May 6, 2024 16:56
@jotacarma90 jotacarma90 linked an issue May 6, 2024 that may be closed by this pull request
1 task
@jotacarma90 jotacarma90 force-pushed the add/7283-audit-never-task-rule branch 2 times, most recently from aab302f to bb6341d Compare May 6, 2024 17:01
@MarcelKemp MarcelKemp added level/task Task issue type/enhancement Enhancement issue labels May 7, 2024
@MarcelKemp MarcelKemp requested a review from javimed May 7, 2024 12:32
@jotacarma90 jotacarma90 force-pushed the add/7283-audit-never-task-rule branch from bb6341d to e85f7bf Compare May 7, 2024 14:36
MarcelKemp
MarcelKemp previously approved these changes May 7, 2024
@jotacarma90 jotacarma90 force-pushed the add/7283-audit-never-task-rule branch from 87e8c11 to abebbb8 Compare May 10, 2024 10:27
@javimed javimed merged commit ee732aa into 4.9.0 May 10, 2024
3 checks passed
@javimed javimed deleted the add/7283-audit-never-task-rule branch May 10, 2024 13:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
level/task Task issue type/enhancement Enhancement issue
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

Auditd won't work on newer OSs because of a default audit rule "-a never,task"
3 participants