added auditd setup and artifact upload (#29)

* added auditd setup and artifact upload

* removed generated files from eslint

* fixed eslint errors

* fixed bash lint issues

* fixes eejs wrappeer

* fixed shfmt errors

* fixed bolt user creation

* upload audit logs to artifact

* added auparse

* added bolt cwd

* moved auparse to working directory

* auparse fixes

* fixed auparse call

* fixed auparse call

* added sudo summary

* moved log upload to debug mode

* fixes

* disablee sudo + sudoless summary

* fixed sed command

* release v1.4.0

.github/workflows/release.yml

@@ -33,11 +33,13 @@ jobs:
       - name: Fetch MITM-Proxy
         run: |
           mkdir -p mitmproxy
+          wget https://github.com/koalalab-inc/go-libaudit/releases/download/v2.5.0/auparse-2.5.0-linux-amd64 --quiet
           wget https://downloads.mitmproxy.org/10.2.2/mitmproxy-10.2.2-${{ env.os }}-${{ env.arch }}.tar.gz --quiet
           tar -xzf mitmproxy-10.2.2-${{ env.os }}-${{ env.arch }}.tar.gz -C mitmproxy
           mkdir -p bolt
           cp mitmproxy/mitmdump bolt/mitmdump
           cp src/intercept.py bolt/intercept.py
+          cp auparse-2.5.0-linux-amd64 bolt/auparse
           tar -czf bolt-${{ env.tag }}-${{ env.os }}-${{ env.arch }}.tar.gz bolt
           rm -rf mitmproxy bolt
           rm mitmproxy-10.2.2-linux-x86_64.tar.gz

.gitignore

@@ -102,4 +102,6 @@ __tests__/runner/*
 .vscode
 *.code-workspace
 
-bin/
+bin/
+
+src/generated/

action.yml

@@ -30,6 +30,10 @@ inputs:
     description: 'Egress rules'
     required: false
     default: '[]'
+  disable_passwordless_sudo:
+    description: 'Disable sudo without password'
+    required: false
+    default: false
 
 # Define your outputs here.
 outputs: