logistic-bot/quasar
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

security: enable audit logging of program launch

Browse source
This commit is contained in:
Khaïs COLIN 2024-08-30 14:20:29 +02:00
parent 173678734c
commit d33b8f05ee
2 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
audit.nix Normal file
View file

@ -0,0 +1,7 @@
{
security.auditd.enable = true;
security.audit.enable = true;
security.audit.rules = [
"-a exit,always -F arch=b64 -S execve"
];
}

4
configuration.nix
View file

@ -5,10 +5,14 @@ in
{ lib, ... }: { { lib, ... }: {
imports = [ imports = [
./hardware-configuration.nix ./hardware-configuration.nix
./audit.nix
./openssh.nix ./openssh.nix
./tailscale.nix ./tailscale.nix
./firewall.nix ./firewall.nix
./fail2ban.nix ./fail2ban.nix
./borgbackup.nix ./borgbackup.nix
./ftp.nix ./ftp.nix