Define a complete security baseline and monitor the baseline's rules. The definition of the baseline should be done in Hiera. The purpose of the module is to give the ability to setup a complete security baseline which not necessarily have to stick to industry security guides like the CIS benchmarks.
The following privileged commands need to have auid!=unset chacl setfacl chcon
as per CIS_Red_Hat_Enterprise_Linux_8_Benchmark_v2.0.0 -a always,exit -F path=/usr/bin/chacl -F perm=x -F auid>=1000 -F auid!=unset -k priv_cmd
similar to issues #66,67 usermod,kmod