summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authortv <tv@krebsco.de>2016-06-30 21:11:13 +0200
committertv <tv@krebsco.de>2016-06-30 21:11:13 +0200
commit4d63548868ec4806d62d82337bb278e6dd34f21e (patch)
tree1781d6372a49f190fcdd58d136d6616cd471520c
parent7b46ccaba5e3c6cd24cf821c5f848c3e4d636512 (diff)
tv audit: -a task,never
-rw-r--r--tv/2configs/audit.nix9
-rw-r--r--tv/2configs/default.nix1
2 files changed, 10 insertions, 0 deletions
diff --git a/tv/2configs/audit.nix b/tv/2configs/audit.nix
new file mode 100644
index 000000000..644741a5b
--- /dev/null
+++ b/tv/2configs/audit.nix
@@ -0,0 +1,9 @@
+{ ... }:
+
+{
+ security.audit = {
+ rules = [
+ "-a task,never"
+ ];
+ };
+}
diff --git a/tv/2configs/default.nix b/tv/2configs/default.nix
index 3e4810dd3..dcc3edd82 100644
--- a/tv/2configs/default.nix
+++ b/tv/2configs/default.nix
@@ -25,6 +25,7 @@ with config.krebs.lib;
imports = [
<secrets>
+ ./audit.nix
./backup.nix
./nginx
./vim.nix