source-git / audit

Clone
Source Code
GIT

Files

  1.   f0d170d27f873339fd59ba333d279d683f17b927
  2.   rules
  3.   30-ospp-v42-4-delete-success.rules
Blob Blame History Raw 
## Successful file delete
-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat -F success=1 -F auid>=1000 -F auid!=unset -F key=successful-delete
-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat -F success=1 -F auid>=1000 -F auid!=unset -F key=successful-delete

Powered by Pagure 5.14.1

SSH Hostkey/Fingerprint | Documentation