summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authortv <tv@krebsco.de>2016-06-30 21:11:13 +0200
committertv <tv@krebsco.de>2016-06-30 21:11:13 +0200
commitc564bd17a8c169d1aafcd2db94dc8571a0e54293 (patch)
tree7a2fcfc378cb25e3b740f7a59f4717c7b51366a6
parent0bf0c2b15dde94338de3d36c98b1a32f83181ead (diff)
tv audit: -a task,never
-rw-r--r--tv/2configs/audit.nix9
-rw-r--r--tv/2configs/default.nix1
2 files changed, 10 insertions, 0 deletions
diff --git a/tv/2configs/audit.nix b/tv/2configs/audit.nix
new file mode 100644
index 0000000..644741a
--- /dev/null
+++ b/tv/2configs/audit.nix
@@ -0,0 +1,9 @@
+{ ... }:
+
+{
+ security.audit = {
+ rules = [
+ "-a task,never"
+ ];
+ };
+}
diff --git a/tv/2configs/default.nix b/tv/2configs/default.nix
index 3e4810d..dcc3edd 100644
--- a/tv/2configs/default.nix
+++ b/tv/2configs/default.nix
@@ -25,6 +25,7 @@ with config.krebs.lib;
imports = [
<secrets>
+ ./audit.nix
./backup.nix
./nginx
./vim.nix