Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Modify note related to 'never,task' rule in auditd #7381

Merged
merged 2 commits into from
Jun 11, 2024

Conversation

jotacarma90
Copy link
Member

@jotacarma90 jotacarma90 commented Jun 11, 2024

Description

In this PR we are modifying a note in the advanced settings of FIM to warn that in some systems auditd comes by default with a rule that prevents Wazuh (and any other process) of the audit rules from working properly.

Checks

Docs building

  • Compiles without warnings.

Code formatting and web optimization

  • Uses three spaces indentation.
  • Adds or updates meta descriptions accordingly.
  • Updates the redirects.js script if necessary (check this guide).

Writing style

  • Uses present tense, active voice, and semi-formal registry.
  • Uses short, simple sentences.
  • Uses bold for user interface elements, italics for key terms or emphasis, and code font for Bash commands, file names, REST paths, and code.

@jotacarma90 jotacarma90 force-pushed the change/7283-auditd-remove-never-task-rule branch from 1b378df to 7ca8328 Compare June 11, 2024 09:41
MarcelKemp
MarcelKemp previously approved these changes Jun 11, 2024
mjcr99
mjcr99 previously approved these changes Jun 11, 2024
Copy link
Member

@mjcr99 mjcr99 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@MarcelKemp MarcelKemp linked an issue Jun 11, 2024 that may be closed by this pull request
1 task
@javimed javimed added level/task Task issue type/change Change requested labels Jun 11, 2024
@javimed javimed dismissed stale reviews from mjcr99 and MarcelKemp via c63a11b June 11, 2024 14:03
@javimed javimed merged commit 94c7ce7 into 4.9.0 Jun 11, 2024
2 checks passed
@javimed javimed deleted the change/7283-auditd-remove-never-task-rule branch June 11, 2024 14:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
level/task Task issue type/change Change requested
Projects
No open projects
Status: Done
Development

Successfully merging this pull request may close these issues.

Auditd won't work on newer OSs because of a default audit rule "-a never,task"
4 participants