doucment why 32 bit

Signed-off-by: Spencer Owen <spencer.owen@cdw.com>
dev-sec · Nov 2, 2022 · 7271fb7 · 7271fb7
1 parent c060a8c
commit 7271fb7
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/controls/4_1_configure_system_accounting_auditd.rb b/controls/4_1_configure_system_accounting_auditd.rb
@@ -143,6 +143,7 @@
 
   only_if { cis_level == 2 }
 
+  # arch=b32 should be set on both 32bit and 64bit systems https://security.stackexchange.com/a/242462
   describe file('/etc/audit/audit.rules') do
     its('content') { should match(/^-a (always,exit|exit,always) -F arch=b32 -S adjtimex -S settimeofday -S stime -k time-change$/) }
     its('content') { should match(/^-a (always,exit|exit,always) -F arch=b32 -S clock_settime -k time-change$/) }