fix audit rules

koalalab-inc · Sep 5, 2024 · cf925fd · cf925fd
1 parent 868211e
commit cf925fd
Show file tree

Hide file tree

Showing 5 changed files with 8 additions and 11 deletions.
diff --git a/dist/index.js b/dist/index.js
diff --git a/src/audit_rules.js b/src/audit_rules.js
@@ -27,8 +27,6 @@ async function auditRulesTemplate({ homeDir, workingDir }) {
 -w /etc/docker/daemon.json -p wa -k bolt_monitored_docker_daemon_changes
 
 -w /var/log/audit/audit.log -p wa -k bolt_monitored_audit_log_changes
-
--e 2
 `
 }
 

diff --git a/src/main.js b/src/main.js
@@ -92,7 +92,7 @@ async function run() {
     core.info('Setting up auditd...')
     const auditRules = await auditRulesTemplate({ homeDir, workingDir })
     fs.writeFileSync('audit.rules', auditRules)
-    await exec(`sudo bash audit.sh ${isDebugMode}`)
+    await exec(`sudo bash audit.sh ${workingDir} ${isDebugMode}`)
     core.info('Setting up auditd... done')
 
     benchmark('setup-auditd')

diff --git a/src/scripts/audit.sh b/src/scripts/audit.sh
@@ -1,6 +1,7 @@
 #! /bin/bash
 
-debug=$1
+workingDir=$1
+debug=$2
 
 if [[ "$debug" == "true" ]]; then
 	set -x
@@ -21,7 +22,7 @@ mv audit.rules /etc/audit/rules.d/
 # Restart auditd service to apply the new rules
 service auditd restart
 
-auditctl -w $2 -p wa -k bolt_monitored_wd_changes
+auditctl -w $workingDir -p wa -k bolt_monitored_wd_changes
 
 auditctl -e 2
 

diff --git a/src/version.js b/src/version.js
@@ -1,4 +1,4 @@
-const releaseVersion = 'v1.7.0-rc.2'
+const releaseVersion = 'v1.7.0-rc.3'
 
 module.exports = {
   releaseVersion