search

kemra102 / puppet-auditd

Manage the audit daemon and it's rules.
BSD 2-Clause "Simplified" License
14 stars 54 forks source link

Add support for RHEL8 #64

Open scornelissen85 opened 4 years ago

scornelissen85 commented 4 years ago

As described here; https://access.redhat.com/solutions/3806561, RedHat stopped with the path /etc/audisp and all settings in audispd.conf are now supported in auditd.conf. From: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html-single/considerations_in_adopting_rhel_8/index#audispd_security

With this update, functionality of audispd has been moved to auditd. As a result, audispd configuration options are now part of auditd.conf. In addition, the plugins.d directory has been moved under /etc/audit. The current status of auditd and its plug-ins can now be checked by running the service auditd state command.

With this change the settings of audispd.conf are moved to auditd.conf. The path /etc/audisp is not managed anymore. Also the plugins for RHEL8 are moved to /etc/auditd/plugins.d

scornelissen85 commented 4 years ago

Some test are failed because old Ruby versions aren't supported anymore. The tests with supported Ruby versions still work.

igalic commented 4 years ago

ref: #63