msw/CISS.debian.live.builder
SHA256
2
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 6 Wiki Activity

## V8.13.096.2025.10.09
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m29s
Details

Browse Source 
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
Marc S. Weidner
2025-10-09 21:20:11 +01:00
parent 3e07d26cc6
commit 7060f945c1
2 changed files with 11 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
config/hooks/live/9996_auditd.chroot
View File

@@ -340,16 +340,22 @@ EOF
### Sanity checks: reject empty or malformed rulesets early. ### Sanity checks: reject empty or malformed rulesets early.
if ! augenrules --check >/dev/null 2>&1; then if ! /sbin/augenrules --check >/dev/null 2>&1; then
log "ERROR: augenrules --check failed. Please fix /etc/audit/rules.d/*.rules" log "ERROR: /sbin/augenrules --check failed. Please fix /etc/audit/rules.d/*.rules"
exit 1 exit 1
fi fi
### This writes '/etc/audit/audit.rules'. if /sbin/augenrules --load; then
log "Compiling /etc/audit/audit.rules (no load)"
augenrules --no-load log "INFO: /sbin/augenrules --load, successful."
else
log "ERROR: /sbin/augenrules --load failed."
fi
### Permissions hardening (augenrules typically sets sane perms; enforce anyway). ### Permissions hardening (augenrules typically sets sane perms; enforce anyway).
### 0600 is conservative; 0640 root:root is also acceptable. ### 0600 is conservative; 0640 root:root is also acceptable.

1
config/package-lists/live.list.common.chroot
View File

@@ -94,7 +94,6 @@ man
man-db man-db
manpages manpages
manpages-dev manpages-dev
mdadm
mtr mtr
musl-tools musl-tools
nano nano