Skip to content

Audit rules and augenrules on RHEL 10 #14429

@Mab879

Description

@Mab879

On RHEL 10, the augenrules.service unit no longer exists — it has been replaced by audit-rules.service.
The current pattern (ExecStartPost=-/sbin/augenrules.*$|Requires=augenrules.service) causes a false negative when evaluating the ANSSI-BP-028 Enhanced profile.
Suggest updating the pattern to support both service names or conditionally check depending on the OS version.

From: OpenSCAP/openscap#2271

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions