SelfPrivacy/selfprivacy-nixos-config
1
0
Fork 0
mirror of https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config.git synced 2025-01-06 16:14:17 +00:00
Code Issues Projects Releases Wiki Activity

add some audit rules

Browse source
This commit is contained in:
Inex Code 2024-07-30 07:32:41 +03:00
parent 6457b5cc9e
commit 9d026e0750
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
sp-modules/monitoring/module.nix
View file

@ -24,6 +24,15 @@ in
};
};
security.auditd.enable = true;
security.audit.enable = true;
security.audit.rules = [
"-w /root -p war -k root"
"-w /etc/nixos -p w -k nixos_config"
"-w /etc/selfprivacy.nix -p w -k selfprivacy_folder"
"-w /sbin/insmod -p x -k module_insertion"
"-w /etc/passwd -p rwxa -k passwd_changes"
"-a exit,always -F arch=b64 -S execve"
];
services.cadvisor = {
enable = true;
port = 9003;