feat(modules/dgn-audit): init #350

Merged

thubrecht merged 1 commit from audit into main 2025-04-16 07:56:42 +02:00

Conversation 3 Commits 1 Files changed 2 +89

lbailly commented 2025-03-28 16:29:45 +01:00

Member

Copy link

Il reste à préciser les règles qu'on veut. Pour le moment il y a la règle classique de log tout les execve, avec un filtre pour ignorer ceux de systemd.

based on https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf

Il reste à préciser les règles qu'on veut. Pour le moment il y a la règle classique de log tout les execve, avec un filtre pour ignorer ceux de systemd. based on https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf

lbailly force-pushed audit from c70e9a8252 to 86dfb8f849 2025-03-28 17:19:00 +01:00 Compare

lbailly force-pushed audit from 86dfb8f849 to 2276d08802 2025-03-28 20:46:40 +01:00 Compare

lbailly force-pushed audit from 2276d08802 to 379dd1b7a6 2025-03-28 21:22:20 +01:00 Compare

lbailly changed title from WIP: feat(modules/dgn-audit): init to feat(modules/dgn-audit): init 2025-03-28 21:23:38 +01:00

lbailly commented 2025-03-28 21:25:00 +01:00

Author

Member

Copy link

Level normal testé sur cof02, faudra aussi faire des tests du level high (je pense notamment que certaine règle seront beaucoup trop verbose)

Level normal testé sur `cof02`, faudra aussi faire des tests du level high (je pense notamment que certaine règle seront beaucoup trop verbose)

lbailly 2025-03-28 21:25:14 +01:00

• added the
  awaiting
  awaiting-reviewer
  label
• requested reviews from thubrecht, rlahfa

mdebray commented 2025-03-29 17:45:13 +01:00

Owner

Copy link

Maybe ajouter des commentaires pour dire ce que chaque mode monitor (ou alors dans la description de l'option) afin que sans connaitre la syntaxe auditd on soit en mesure de savoir ce qui est log

Maybe ajouter des commentaires pour dire ce que chaque mode monitor (ou alors dans la description de l'option) afin que sans connaitre la syntaxe auditd on soit en mesure de savoir ce qui est log

lbailly force-pushed audit from 379dd1b7a6 to 2b54ae45b3 2025-03-31 00:34:04 +02:00 Compare

lbailly force-pushed audit from 2b54ae45b3 to e3ba20d43a 2025-04-13 11:32:10 +02:00 Compare

thubrecht approved these changes 2025-04-16 07:53:20 +02:00

thubrecht scheduled this pull request to auto merge when all checks succeed 2025-04-16 07:54:14 +02:00

thubrecht force-pushed audit from e3ba20d43a to a1fc8f8cfe 2025-04-16 07:54:20 +02:00 Compare

thubrecht merged commit a1fc8f8cfe into main 2025-04-16 07:56:42 +02:00

thubrecht deleted branch audit 2025-04-16 07:56:42 +02:00

dgnum-chores referenced this pull request 2025-10-22 08:00:35 +02:00

lon: update agenix #662

dgnum-chores referenced this pull request from a commit 2025-10-22 08:00:37 +02:00

lon: update agenix

mdebray referenced this pull request from a commit 2025-10-23 23:42:18 +02:00

lon: update agenix

Sign in to join this conversation.

Reviewers

No reviewers

rlahfa

thubrecht

Labels

Clear labels   

awaiting

awaiting-author

Awaiting for the author interaction (e.g. QA/confirmation/final merge)

  

awaiting

awaiting-reviewer

Awaiting for a privileged reviewer to approve this PR

  

bot

Pull Request opened by a bot

  

deployed

This PR is currently deployed on the infra

  

Silenced alert

This is a known and silenced alert.

  

bug

Something is not working

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

help wanted

Need some help

  

invalid

Something is wrong

  

question

More information is needed

  

wontfix

This won't be fixed

No labels

awaiting

awaiting-author

awaiting

awaiting-reviewer

bot

deployed

Silenced alert

bug

duplicate

enhancement

help wanted

invalid

question

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

3 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

DGNum/infrastructure!350

No description provided.