mrcharles
39bb855a98
Archive the non-ported remainder of the legacy KNELServerBuild repo
under archive/KNELServerBuild/ with its original structure intact,
completing the legacy repo merge for everything except the live
LibreNMS patterns (ported in the previous commit).
Exclusions:
- .git history (superseded; legacy repo remains at its original path)
- ported files (Agents/librenms, Modules/OAM/oam-librenms.sh,
ConfigFiles/SNMP/snmp-sudo.conf)
- vendored KNELShellFramework tree (byte-identical duplicate of the
copy already vendored at vendor/ in this repo)
- SSH authorized-keys files (live access-control material; carrying
them in an archive invites drift — key policy lives elsewhere)
The whole tree is skip-listed in tests/shellcheck.sh (archived legacy
code, not maintained — same standing as vendor/); check-rules.sh
already prunes archive/. Rule 9 (conflict markers) now also excludes
archive/ staged files: preserved-verbatim legacy scripts contain
decorative "====" banners that false-positive as conflict markers
(same archive exclusion precedent as rule 11).
AGENTS.md: note archive/KNELServerBuild and oam/librenms-agent in the
Repository Layout, and fix the stale KNELIAC path to
/home/reachableceo/projects/KNEL/KNELIAC.
💘 Generated with Crush
Assisted-by: Crush:glm-5.2
47 lines
915 B
Plaintext
47 lines
915 B
Plaintext
#
|
|
# Known Element Enterprises Customized Config File
|
|
# auditd
|
|
# Initial version 2025-06-27
|
|
#
|
|
|
|
local_events = yes
|
|
write_logs = yes
|
|
log_file = /var/log/audit/audit.log
|
|
log_group = adm
|
|
log_format = ENRICHED
|
|
flush = INCREMENTAL_ASYNC
|
|
freq = 50
|
|
max_log_file = 8
|
|
num_logs = 5
|
|
priority_boost = 4
|
|
name_format = NONE
|
|
max_log_file_action = keep_logs
|
|
space_left = 75
|
|
space_left_action = email
|
|
action_mail_acct = root
|
|
|
|
admin_space_left_action = halt
|
|
disk_full_action = SUSPEND
|
|
disk_error_action = SUSPEND
|
|
admin_space_left = 50
|
|
|
|
verify_email = yes
|
|
use_libwrap = yes
|
|
tcp_listen_queue = 5
|
|
tcp_max_per_addr = 1
|
|
tcp_client_max_idle = 0
|
|
transport = TCP
|
|
distribute_network = no
|
|
q_depth = 2000
|
|
overflow_action = SYSLOG
|
|
max_restarts = 10
|
|
plugin_dir = /etc/audit/plugins.d
|
|
end_of_event_timeout = 2
|
|
##tcp_client_ports = 1024-65535
|
|
##tcp_listen_port = 60
|
|
|
|
##krb5_key_file = /etc/audit/audit.key
|
|
krb5_principal = auditd
|
|
|
|
##name = mydomain
|