Skip to content

Commit cfc7d64

Browse files
authored
Auditd procedure (#1108)
* Auditd procedure
1 parent c472a62 commit cfc7d64

6 files changed

Lines changed: 887 additions & 0 deletions

File tree

src/modules/complianceengine/src/lib/CMakeLists.txt

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@ endif()
88

99
set(PROCEDURES
1010
procedures/EnsureAccountsWithoutShellAreLocked.cpp
11+
procedures/AuditdRulesCheck.cpp
1112
procedures/EnsureAllGroupsFromEtcPasswdExistInEtcGroup.cpp
1213
procedures/EnsureApparmorProfiles.cpp
1314
procedures/EnsureDconf.cpp
@@ -45,6 +46,7 @@ set(PROCEDURES
4546
)
4647
set(SCHEMAS
4748
procedures/EnsureAccountsWithoutShellAreLocked.schema.json
49+
procedures/AuditdRulesCheck.schema.json
4850
procedures/EnsureAllGroupsFromEtcPasswdExistInEtcGroup.schema.json
4951
procedures/EnsureApparmorProfiles.schema.json
5052
procedures/EnsureDconf.schema.json

src/modules/complianceengine/src/lib/RegexFallback.h

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -281,6 +281,26 @@ class MatchResults
281281
return nullptr != mPmatch;
282282
}
283283

284+
std::size_t position(std::size_t i) const
285+
{
286+
assert(ready());
287+
if (i < mSize)
288+
{
289+
return mPmatch[i].rm_so;
290+
}
291+
return std::string::npos;
292+
}
293+
294+
std::size_t length(std::size_t i) const
295+
{
296+
assert(ready());
297+
if (i < mSize)
298+
{
299+
return mPmatch[i].rm_eo - mPmatch[i].rm_so;
300+
}
301+
return 0;
302+
}
303+
284304
SubMatch operator[](std::size_t i) const
285305
{
286306
assert(ready());

src/modules/complianceengine/src/lib/payload.schema.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -130,6 +130,9 @@
130130
},
131131
"auditProcedure": {
132132
"anyOf": [
133+
{
134+
"$ref": "procedures/AuditdRulesCheck.schema.json#/definitions/audit"
135+
},
133136
{
134137
"$ref": "procedures/EnsureAccountsWithoutShellAreLocked.schema.json#/definitions/audit"
135138
},
@@ -239,6 +242,9 @@
239242
},
240243
"remediationProcedure": {
241244
"anyOf": [
245+
{
246+
"$ref": "procedures/AuditdRulesCheck.schema.json#/definitions/remediation"
247+
},
242248
{
243249
"$ref": "procedures/EnsureAccountsWithoutShellAreLocked.schema.json#/definitions/remediation"
244250
},

0 commit comments

Comments
 (0)