diff --git a/CHANGELOG b/CHANGELOG index 11e640b2..c133812b 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,3 +1,6 @@ +* Tue Oct 24 2023 Joshua Hoblitt - 8.13.0 +- Add EL9 support + * Wed Oct 11 2023 Steven Pritchard - 8.12.0 - [puppetsync] Updates for Puppet 8 - These updates may include the following: diff --git a/data/os/OracleLinux-9.yaml b/data/os/OracleLinux-9.yaml new file mode 100644 index 00000000..b4c78795 --- /dev/null +++ b/data/os/OracleLinux-9.yaml @@ -0,0 +1,57 @@ +--- +# Default to auditd version 3 settings +auditd::plugin_dir: '/etc/audit/plugins.d' +auditd::config::audisp::syslog::type: 'always' +auditd::config::audisp::syslog::syslog_path: '/sbin/audisp-syslog' +auditd::config::audisp::syslog::pkg_name: 'audispd-plugins' + +auditd::config::audit_profiles::stig::default_suid_sgid_cmds: + - "/usr/bin/at" + - "/usr/bin/chage" + - "/usr/bin/chcon" + - "/usr/bin/chfn" + - "/usr/bin/chsh" + - "/usr/bin/crontab" + - "/usr/bin/fusermount" + - "/usr/bin/gpasswd" + - "/usr/bin/incrontab" + - "/usr/bin/ksu" + - "/usr/bin/locate" + - "/usr/bin/mount" + - "/usr/bin/newgidmap" + - "/usr/bin/newgrp" + - "/usr/bin/newuidmap" + - "/usr/bin/passwd" + - "/usr/bin/pkexec" + - "/usr/bin/screen" + - "/usr/bin/ssh-agent" + - "/usr/bin/su" + - "/usr/bin/sudo" + - "/usr/bin/sudoedit" + - "/usr/bin/umount" + - "/usr/bin/wall" + - "/usr/bin/write" + - "/usr/bin/Xorg" + - "/usr/lib64/dbus-1/dbus-daemon-launch-helper" + - "/usr/libexec/dbus-1/dbus-daemon-launch-helper" + - "/usr/libexec/openssh/ssh-keysign" + - "/usr/libexec/pt_chown" + - "/usr/libexec/sssd/krb5_child" + - "/usr/libexec/sssd/ldap_child" + - "/usr/libexec/sssd/proxy_child" + - "/usr/libexec/sssd/selinux_child" + - "/usr/libexec/utempter/utempter" + - "/usr/lib/polkit-1/polkit-agent-helper-1" + - "/usr/sbin/mount.nfs" + - "/usr/sbin/netreport" + - "/usr/sbin/pam_timestamp_check" + - "/usr/sbin/postdrop" + - "/usr/sbin/postqueue" + - "/usr/sbin/restorecon" + - "/usr/sbin/semanage" + - "/usr/sbin/setfiles" + - "/usr/sbin/setsebool" + - "/usr/sbin/seunshare" + - "/usr/sbin/unix_chkpwd" + - "/usr/sbin/userhelper" + - "/usr/sbin/usernetctl" diff --git a/metadata.json b/metadata.json index ad6303d7..0e7cafed 100644 --- a/metadata.json +++ b/metadata.json @@ -1,6 +1,6 @@ { "name": "simp-auditd", - "version": "8.12.0", + "version": "8.13.0", "author": "SIMP Team", "summary": "A SIMP puppet module for managing auditd and audispd", "license": "Apache-2.0", @@ -61,7 +61,8 @@ "operatingsystem": "OracleLinux", "operatingsystemrelease": [ "7", - "8" + "8", + "9" ] }, {