X-Git-Url: https://gerrit.akraino.org/r/gitweb?p=ta%2Finfra-ansible.git;a=blobdiff_plain;f=roles%2Faudit%2Ftemplates%2F42-injection.rules.j2;fp=roles%2Faudit%2Ftemplates%2F42-injection.rules.j2;h=5344d95141ec8045c5afb91c020d46ae5c90d22f;hp=ca2b4236773d5c15fecd11ee0fa7f9469e72cee6;hb=070e5c7e2d2ac18fc59f3fe83d364062f4883050;hpb=b2e13865c2b899ce48148879da20323bd9bc988c diff --git a/roles/audit/templates/42-injection.rules.j2 b/roles/audit/templates/42-injection.rules.j2 index ca2b423..5344d95 100644 --- a/roles/audit/templates/42-injection.rules.j2 +++ b/roles/audit/templates/42-injection.rules.j2 @@ -22,8 +22,10 @@ -a always,exit -F arch=b64 -S prlimit64 -F key=64bit_prlimit64 -a always,exit -F arch=b32 -S unshare -F key=32bit_unshare -a always,exit -F arch=b64 -S unshare -F key=64bit_unshare +{% if ansible_architecture not in ['aarch64'] %} -a always,exit -F arch=b32 -S set_thread_area -F key=32bit_set_thread_area -a always,exit -F arch=b64 -S set_thread_area -F key=64bit_set_thread_area +{% endif %} -a always,exit -F arch=b32 -S sched_setattr -F key=32bit_sched_setattr -a always,exit -F arch=b64 -S sched_setattr -F key=64bit_sched_setattr -a always,exit -F arch=b32 -S pivot_root -F key=32bit_pivot_root