Use -allow-service-list to get a list of supported services. To allow a certain kind of services on the machine, such as http, mail, etc.Ĭan be specified multiple times to allow multiple services. allow-service : use with -set-hardening-level. set-hardening-level: run all checks that are lower or equal to the selected level.ĭo NOT use this option if you have already started to customize your configuration. batch: while performing system audit, this option sets LOGLEVEL to 'ok' andĬaptures all output to print only one line once the check is done, formatted like : With NOPASWD option, since checks are executed with sudo -n option, that will ![]() You need to provide a sudoers file in /etc/sudoers.d/ sudo: audit your system as a normal user, but allow sudo escalation to read If you have already started to customize your configuration. It will automatically be enabled for future runs. audit-all-enable-passed can be used as a quick way to kickstart yourĬonfiguration. audit-all can be used to force running all auditing scripts,
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |