PNG  IHDR* pHYs+ IDATx]n#; cdLb Ǚ[at¤_:uP}>!Usă cag޿ ֵNu`ݼTâabO7uL&y^wFٝA"l[|ŲHLN밪4*sG3|Dv}?+y߉{OuOAt4Jj.u]Gz*҉sP'VQKbA1u\`& Af;HWj hsO;ogTu uj7S3/QzUr&wS`M$X_L7r2;aE+ώ%vikDA:dR+%KzƉo>eOth$z%: :{WwaQ:wz%4foɹE[9<]#ERINƻv溂E%P1i01 |Jvҗ&{b?9g=^wζXn/lK::90KwrюO\!ջ3uzuGv^;騢wq<Iatv09:tt~hEG`v;3@MNZD.1]L:{ծI3`L(÷ba")Y.iljCɄae#I"1 `3*Bdz>j<fU40⨬%O$3cGt]j%Fߠ_twJ;ABU8vP3uEԑwQ V:h%))LfraqX-ۿX]v-\9I gl8tzX ]ecm)-cgʒ#Uw=Wlێn(0hPP/ӨtQ“&J35 $=]r1{tLuǮ*i0_;NƝ8;-vݏr8+U-kruȕYr0RnC]*ެ(M:]gE;{]tg(#ZJ9y>utRDRMdr9㪩̞zֹb<ģ&wzJM"iI( .ꮅX)Qw:9,i좜\Ԛi7&N0:asϓc];=ΗOӣ APqz93 y $)A*kVHZwBƺnWNaby>XMN*45~ղM6Nvm;A=jֲ.~1}(9`KJ/V F9[=`~[;sRuk]rєT!)iQO)Y$V ی ۤmzWz5IM Zb )ˆC`6 rRa}qNmUfDsWuˤV{ Pݝ'=Kֳbg,UҘVz2ﴻnjNgBb{? ߮tcsͻQuxVCIY۠:(V뺕 ٥2;t`@Fo{Z9`;]wMzU~%UA蛚dI vGq\r82iu +St`cR.6U/M9IENDB` REDROOM
REDROOM
PHP 5.6.40
Preview: README-rules Size: 1.39 KB
/usr/share/audit/sample-rules/README-rules
This group of rules are meant to be used with the augenrules program.
The augenrules program expects rules to be located in /etc/audit/rules.d/
The rules will get processed in a specific order based on their natural
sort order. To make things easier to use, the files in this directory are
organized into groups with the following meanings:

10 - Kernel and auditctl configuration
20 - Rules that could match general rules but we want a different match
30 - Main rules
40 - Optional rules
50 - Server Specific rules
70 - System local rules
90 - Finalize (immutable)

There is one set of rules, 31-privileged.rules, that should be regenerated.
There is a script in the comments of that file. You can uncomment the commands
and run the script and then rename the resulting file.

The rules are not meant to be used all at once. They are pieces of a policy
that should be thought out and individual files copied to /etc/audit/rules.d/
For example, if you wanted to set a system up in the STIG configuration, copy
rules 10-base-config, 30-stig, 31-privileged, and 99-finalize. You can add
more if you like. Also, not all arches have the same syscalls. It is expected
that the rules be fine tuned for the arch they are deployed on. For example,
aarch64 does not have the open syscall. It should just be deleted from the
rules.

Once you have the rules in the rules.d directory, you can load them by running
augenrules --load

Directory Contents

Dirs: 0 × Files: 36
Name Size Perms Modified Actions
10-base-config.rules
244 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
10-no-audit.rules
284 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
11-loginuid.rules
93 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
12-cont-fail.rules
333 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
12-ignore-error.rules
327 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
20-dont-audit.rules
516 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
21-no32bit.rules
273 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
22-ignore-chrony.rules
254 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
23-ignore-filesystems.rules
507 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-nispom.rules
4.83 KB lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-ospp-v42-1-create-failed.rules
1.46 KB lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-ospp-v42-1-create-success.rules
746 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-ospp-v42-2-modify-failed.rules
1.61 KB lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-ospp-v42-2-modify-success.rules
826 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-ospp-v42-3-access-failed.rules
625 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-ospp-v42-3-access-success.rules
399 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-ospp-v42-4-delete-failed.rules
562 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-ospp-v42-4-delete-success.rules
284 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-ospp-v42-5-perm-change-failed.rules
816 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-ospp-v42-5-perm-change-success.rules
414 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-ospp-v42-6-owner-change-failed.rules
579 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-ospp-v42-6-owner-change-success.rules
295 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-ospp-v42.rules
5.81 KB lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-pci-dss-v31.rules
6.34 KB lrw-r--r-- 2025-07-15 09:41:56
Edit Download
30-stig.rules
6.78 KB lrw-r--r-- 2025-07-15 09:41:56
Edit Download
31-privileged.rules
1.42 KB lrw-r--r-- 2025-07-15 09:41:56
Edit Download
32-power-abuse.rules
213 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
40-local.rules
156 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
41-containers.rules
439 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
42-injection.rules
672 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
43-module-load.rules
398 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
44-installers.rules
584 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
70-einval.rules
326 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
71-networking.rules
151 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
99-finalize.rules
86 B lrw-r--r-- 2025-07-15 09:41:56
Edit Download
README-rules
1.39 KB lrw-r--r-- 2025-07-15 09:41:56
Edit Download
If ZipArchive is unavailable, a .tar will be created (no compression).
© 2026 REDROOM — Secure File Manager. All rights reserved. Built with ❤️ & Red Dark UI