From 91699576985e103d8c03d94d4a0b58038da010b8 Mon Sep 17 00:00:00 2001 From: Mark Bolwell Date: Wed, 29 Jan 2025 14:22:24 +0000 Subject: [PATCH] Updated template Signed-off-by: Mark Bolwell --- templates/audit/99_auditd.rules.j2 | 1 - 1 file changed, 1 deletion(-) diff --git a/templates/audit/99_auditd.rules.j2 b/templates/audit/99_auditd.rules.j2 index cb12736..c162bc0 100644 --- a/templates/audit/99_auditd.rules.j2 +++ b/templates/audit/99_auditd.rules.j2 @@ -138,7 +138,6 @@ -a always,exit -F arch=b64 -S {{ arch_syscalls|join(',') }} -F auid=>{{ prelim_min_int_uid }} -F auid!=unset -k mounts -a always,exit -F arch=b32 -S {{ arch_syscalls|join(',') }} -F auid=>{{ prelim_min_int_uid }} -F auid!=unset -k mounts {% endif %} -{% endif %} {% if rhel9cis_rule_6_3_3_11 %} -w /var/run/utmp -p wa -k session -w /var/log/wtmp -p wa -k session