You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
stime syscall in b64 audit rules: augenrules --load (and therefore audit-rules.service and auditd.service) was failing on modern kernels because stime (syscall nr 25) was removed from x86_64 in Linux 5.x. The audit mapper now strips -S stime from b64 rules; b32 rules keep it for 32-bit compatibility. If stripping leaves a b64 rule with no syscalls and no other filters, that line is dropped entirely.
/etc/ssh and /tmp are directories: file_permissions_sshd_pub_key and file_permissions_unauthorized_world_writable were generating file.managed states targeting /etc/ssh and /tmp, which Salt rejects for directory paths. Both are now added to the known-directory set and emit file.directory states.