Update changelog

FIX(4.1.11): add SUDO to find suid files
2025-07-16 13:52:17 +02:00 · 2021-04-13 11:00:29 +02:00 · 2021-04-13 11:00:29 +02:00
2 changed files with 8 additions and 1 deletions
--- a/bin/hardening/4.1.11_record_privileged_commands.sh
+++ b/bin/hardening/4.1.11_record_privileged_commands.sh
@ -17,8 +17,9 @@ HARDENING_LEVEL=4
 # shellcheck disable=2034
 DESCRIPTION="Collect use of privileged commands."

+SUDO_CMD='sudo -n'
 # Find all files with setuid or setgid set
-AUDIT_PARAMS=$(find / -xdev \( -perm -4000 -o -perm -2000 \) -type f |
+AUDIT_PARAMS=$($SUDO_CMD find / -xdev \( -perm -4000 -o -perm -2000 \) -type f |
    awk '{print "-a always,exit -F path=" $1 " -F perm=x -F auid>=1000 -F auid!=4294967295 -k privileged" }')
 FILE='/etc/audit/audit.rules'

--- a/debian/changelog
+++ b/debian/changelog
@ -1,3 +1,9 @@
+cis-hardening (3.1-3) unstable; urgency=medium
+
+  * Fix 4.1.11 permissions
+
+ -- Thibault Ayanides <thibault.ayanides@ovhcloud.com>  Mon, 12 Apr 2021 12:17:16 +0200
+
 cis-hardening (3.1-2) unstable; urgency=medium

  * Fix case for sshd pattern searching
Author	SHA1	Message	Date
Thibault Ayanides	dd41988933	Update changelog	2021-04-13 11:00:29 +02:00
Thibault Ayanides	f6c6e6a0a8	FIX(4.1.11): add SUDO to find suid files	2021-04-13 11:00:29 +02:00