X-Git-Url: https://gerrit.akraino.org/r/gitweb?a=blobdiff_plain;f=roles%2Faudit%2Ftemplates%2F50-file-changes.rules.j2;h=c81c6a500262df0a3232a76b4ad84f5e898b0f3f;hb=bb5a48dd936f398e07335212583c5859abf0fafc;hp=f01ba55ea7b65f7177ffb10dd857bc0cb6d4c7be;hpb=546b3966551e02ad91d162ca75d0afad141f5bc2;p=ta%2Finfra-ansible.git diff --git a/roles/audit/templates/50-file-changes.rules.j2 b/roles/audit/templates/50-file-changes.rules.j2 index f01ba55..c81c6a5 100644 --- a/roles/audit/templates/50-file-changes.rules.j2 +++ b/roles/audit/templates/50-file-changes.rules.j2 @@ -1,5 +1,5 @@ ## file changes --w /opt/nokia/bin/hostcli -p aw -k hostcli +-w /usr/local/bin/hostcli -p aw -k hostcli -w /usr/bin/openstack -p aw -k openstackcli -w /boot/ -p rwxa -k dir_boot -w /opt/ -p aw -k dir_opt @@ -13,11 +13,15 @@ -w /usr/lib64 -p aw -k usr-lib64 -w /var/log/audit/ -k audit-logs -w /var/log/sudo.log -p wa -k actions +{% if ansible_architecture not in ['aarch64'] %} -a always,exit -F arch=b64 -S epoll_wait_old -F key=64bit_epoll_wait_old +{% endif %} -a always,exit -F arch=b32 -S inotify_add_watch -F key=32bit_inotify_add_watch -a always,exit -F arch=b64 -S inotify_add_watch -F key=64bit_inotify_add_watch +{% if ansible_architecture not in ['aarch64'] %} -a always,exit -F arch=b32 -S inotify_init -F key=32bit_inotify_init -a always,exit -F arch=b64 -S inotify_init -F key=64bit_inotify_init +{% endif %} -a always,exit -F arch=b32 -S inotify_init1 -F key=32bit_inotify_init1 -a always,exit -F arch=b64 -S inotify_init1 -F key=64bit_inotify_init1 -a always,exit -F arch=b32 -S inotify_rm_watch -F key=32bit_inotify_rm_watch