first commit
This commit is contained in:
@@ -0,0 +1,5 @@
|
||||
# Regle custom (hors CIS) - surveillance dediee de l'utilisateur omnex
|
||||
# auid (login uid) persiste a travers tout sudo/su : capture donc TOUTES les commandes
|
||||
# executees par omnex, meme apres elevation de privileges.
|
||||
-a always,exit -F arch=b64 -F auid={{ omnex_uid }} -S execve -k omnex_actions
|
||||
-a always,exit -F arch=b32 -F auid={{ omnex_uid }} -S execve -k omnex_actions
|
||||
Reference in New Issue
Block a user