search

chef-cookbooks / auditd

Install and configure user mode auditd tools
Apache License 2.0
34 stars 39 forks source link

Fix ERBs for debian/ubuntu only partial auditd logging #29

Closed gibbsoft closed 6 years ago

gibbsoft commented 7 years ago

Existing ERB rulebases are platform specific, ie. Enterprise Linux variants. The result of which is that for example with the CIS rulebase, lines beyond 38 are not parsed on Debian/Ubuntu.

This PR adds Debian/Ubuntu specific versions of the rulebase ERBs.

Additionally, to easily facilitate additional custom lines, a new additional_lines array attribute has been added.

tas50 commented 6 years ago

I'm going to close this out at this point since this has a huge number of conflicts with the current codebase. If this is still something you want to do please open a new PR and we'll get it quickly reviewed this time before the code drifts.