Skip to content

Commit

Permalink
fixed typo in audit description
Browse files Browse the repository at this point in the history
spotted by @themighty1
  • Loading branch information
gustavo-iniguez-goya committed Oct 20, 2020
1 parent 4949ab1 commit cc75289
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion daemon/procmon/audit/client.go
Original file line number Diff line number Diff line change
Expand Up @@ -8,12 +8,15 @@
// started.
//
// Requisities:
// - install auditd and audisp-plugins
// - install auditd and audispd-plugins
// - enable af_unix plugin /etc/audisp/plugins.d/af_unix.conf (active = yes)
// - auditctl -a always,exit -F arch=b64 -S socket,connect,execve -k opensnitchd
// - increase /etc/audisp/audispd.conf q_depth if there're dropped events
// - set write_logs to no if you don't need/want audit logs to be stored in the disk.
//
// read messages from the pipe to verify that it's working:
// socat unix-connect:/var/run/audispd_events stdio
//
// Audit event fields:
// https://github.com/linux-audit/audit-documentation/blob/master/specs/fields/field-dictionary.csv
// Record types:
Expand Down

0 comments on commit cc75289

Please sign in to comment.