I wrote a short audit policy generating script in python. This script
inspects an auditd-enabled system and then writes a policy to watch certain
files and syscalls. It helps me create a baseline to start with.
The script is attached......
Show replies by date