elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-08-05 23:01:16 +02:00
Code Issues Packages Projects Releases Wiki Activity

ADD(1.7.x): add apparmor checks

Browse Source
This commit is contained in:
Thibault Ayanides
2020-12-23 10:46:51 +01:00
parent 936b84c0f2
commit 8da1107532
9 changed files with 179 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
cisharden.sudoers
View File

@@ -19,6 +19,7 @@ Cmnd_Alias SCL_CMD = /bin/grep ,\
/sbin/sysctl kernel.*,\
/sbin/sysctl -a,\
/bin/dmesg "",\
/bin/netstat
/bin/netstat,\
/usr/sbin/apparmor_status
cisharden ALL = (root) NOPASSWD: SCL_CMD