Merge pull request #818 from konstruktoid/credsec

audit systemd credential.secret
konstruktoid · Dec 25, 2024 · 0a5375a · 0a5375a
2 parents e5ffaef + 97fb4ba
commit 0a5375a
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/templates/etc/audit/rules.d/hardening.rules.j2 b/templates/etc/audit/rules.d/hardening.rules.j2
@@ -319,6 +319,7 @@
 -w /bin/systemctl -p x -F key=systemd-tools
 -w /etc/systemd -p wa -F key=systemd
 -w /lib/systemd -p wa -F key=systemd
+-w /var/lib/systemd/credential.secret -p wa -F key=systemd
 
 # Time changes
 -a always,exit -F arch=b32 -S adjtimex,settimeofday,stime,clock_settime -F key=time-change