Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Minor errors #1

Closed
lliknart opened this issue Sep 25, 2018 · 2 comments
Closed

Minor errors #1

lliknart opened this issue Sep 25, 2018 · 2 comments

Comments

@lliknart
Copy link

Hi,

First of all, thank you for this auditd configuration file.
I use auditbeat running on Ubuntu 16.04 and get some errors when I load this configuration file.

Errors:

  • Duplicate rules : this rule is present twice:
    -w /etc/sysconfig/network -p wa -k network_modifications

  • Unknown user chrony : the user is _chrony on Ubuntu 16.04

Correction:

  • Delete the duplicate rule
  • Change chrony by _chrony
Neo23x0 added a commit that referenced this issue Sep 25, 2018
See #1
@Neo23x0
Copy link
Owner

Neo23x0 commented Sep 25, 2018

c1b6620

@Neo23x0 Neo23x0 closed this as completed Sep 25, 2018
@alexjfisher
Copy link

On RHEL/CentOS, the user is chrony though.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants