search

SUSE / linux-security-sensor

Linux security sensor
Other
18 stars 9 forks source link

Add artifact to monitor user group updates #24

Closed guangyee closed 2 years ago

guangyee commented 2 years ago

Add artifact collects user group changes from auditd events, by monitoring updates made to either /etc/group or /etc/nsswitch.conf.