SM0 She11

Path: / / usr / sbin

Full Path (server): /usr/sbin

📄 accessdb [E] [D]
📄 addgnupghome [E] [D]
📄 addpart [E] [D]
📄 adduser [E] [D]
📄 agetty [E] [D]
📄 alternatives [E] [D]
📄 amavisd [E] [D]
📄 anacron [E] [D]
📄 applygnupgdefaults [E] [D]
📄 arp [E] [D]
📄 arpd [E] [D]
📄 arping [E] [D]
📄 atd [E] [D]
📄 atrun [E] [D]
📄 audispd [E] [D]
📄 auditctl [E] [D]
📄 auditd [E] [D]
📄 augenrules [E] [D]
📄 aureport [E] [D]
📄 ausearch [E] [D]
📄 authconfig [E] [D]
📄 authconfig-tui [E] [D]
📄 autrace [E] [D]
📄 avcstat [E] [D]
📄 badblocks [E] [D]
📄 biosdecode [E] [D]
📄 blkdeactivate [E] [D]
📄 blkdiscard [E] [D]
📄 blkid [E] [D]
📄 blockdev [E] [D]
📄 bridge [E] [D]
📄 btrfs [E] [D]
📄 btrfs-convert [E] [D]
📄 btrfs-debug-tree [E] [D]
📄 btrfs-find-root [E] [D]
📄 btrfs-image [E] [D]
📄 btrfs-map-logical [E] [D]
📄 btrfs-select-super [E] [D]
📄 btrfs-zero-log [E] [D]
📄 btrfsck [E] [D]
📄 btrfstune [E] [D]
📄 build-locale-archive [E] [D]
📄 cacertdir_rehash [E] [D]
📄 capsh [E] [D]
📄 cbq [E] [D]
📄 cfdisk [E] [D]
📄 chcpu [E] [D]
📄 chgpasswd [E] [D]
📄 chkconfig [E] [D]
📄 chpasswd [E] [D]
📄 chronyd [E] [D]
📄 chroot [E] [D]
📄 clamd [E] [D]
📄 clamonacc [E] [D]
📄 clock [E] [D]
📄 clockdiff [E] [D]
📄 consoletype [E] [D]
📄 convertquota [E] [D]
📄 cracklib-check [E] [D]
📄 cracklib-format [E] [D]
📄 cracklib-packer [E] [D]
📄 cracklib-unpacker [E] [D]
📄 create-cracklib-dict [E] [D]
📄 crond [E] [D]
📄 csf [E] [D]
📄 ctrlaltdel [E] [D]
📄 ctstat [E] [D]
📄 ddns-confgen [E] [D]
📄 debugfs [E] [D]
📄 delpart [E] [D]
📄 depmod [E] [D]
📄 devlink [E] [D]
📄 dhclient [E] [D]
📄 dhclient-script [E] [D]
📄 dmfilemapd [E] [D]
📄 dmidecode [E] [D]
📄 dmsetup [E] [D]
📄 dmstats [E] [D]
📄 dnssec-checkds [E] [D]
📄 dnssec-coverage [E] [D]
📄 dnssec-dsfromkey [E] [D]
📄 dnssec-importkey [E] [D]
📄 dnssec-keyfromlabel [E] [D]
📄 dnssec-keygen [E] [D]
📄 dnssec-keymgr [E] [D]
📄 dnssec-revoke [E] [D]
📄 dnssec-settime [E] [D]
📄 dnssec-signzone [E] [D]
📄 dnssec-verify [E] [D]
📄 dovecot [E] [D]
📄 dracut [E] [D]
📄 dumpe2fs [E] [D]
📄 e2freefrag [E] [D]
📄 e2fsck [E] [D]
📄 e2image [E] [D]
📄 e2label [E] [D]
📄 e2undo [E] [D]
📄 e4defrag [E] [D]
📄 eapol_test [E] [D]
📄 edquota [E] [D]
📄 ether-wake [E] [D]
📄 ethtool [E] [D]
📄 faillock [E] [D]
📄 fdformat [E] [D]
📄 fdisk [E] [D]
📄 filefrag [E] [D]
📄 findfs [E] [D]
📄 fixfiles [E] [D]
📄 fsck [E] [D]
📄 fsck.btrfs [E] [D]
📄 fsck.cramfs [E] [D]
📄 fsck.ext2 [E] [D]
📄 fsck.ext3 [E] [D]
📄 fsck.ext4 [E] [D]
📄 fsck.minix [E] [D]
📄 fsck.xfs [E] [D]
📄 fsfreeze [E] [D]
📄 fstrim [E] [D]
📄 fuser [E] [D]
📄 genccode [E] [D]
📄 gencmn [E] [D]
📄 genhomedircon [E] [D]
📄 genhostid [E] [D]
📄 genl [E] [D]
📄 genl-ctrl-list [E] [D]
📄 gennorm2 [E] [D]
📄 genrandom [E] [D]
📄 gensprep [E] [D]
📄 getcap [E] [D]
📄 getenforce [E] [D]
📄 getpcaps [E] [D]
📄 getsebool [E] [D]
📄 glibc_post_upgrade.x86_64 [E] [D]
📄 groupadd [E] [D]
📄 groupdel [E] [D]
📄 groupmems [E] [D]
📄 groupmod [E] [D]
📄 grpck [E] [D]
📄 grpconv [E] [D]
📄 grpunconv [E] [D]
📄 grub2-bios-setup [E] [D]
📄 grub2-get-kernel-settings [E] [D]
📄 grub2-install [E] [D]
📄 grub2-macbless [E] [D]
📄 grub2-mkconfig [E] [D]
📄 grub2-ofpathname [E] [D]
📄 grub2-probe [E] [D]
📄 grub2-reboot [E] [D]
📄 grub2-rpm-sort [E] [D]
📄 grub2-set-default [E] [D]
📄 grub2-setpassword [E] [D]
📄 grub2-sparc64-setup [E] [D]
📄 grubby [E] [D]
📄 gss-server [E] [D]
📄 halt [E] [D]
📄 hardlink [E] [D]
📄 hwclock [E] [D]
📄 iconvconfig [E] [D]
📄 iconvconfig.x86_64 [E] [D]
📄 icupkg [E] [D]
📄 ifcfg [E] [D]
📄 ifconfig [E] [D]
📄 ifdown [E] [D]
📄 ifenslave [E] [D]
📄 ifstat [E] [D]
📄 ifup [E] [D]
📄 init [E] [D]
📄 insmod [E] [D]
📄 install-info [E] [D]
📄 installkernel [E] [D]
📄 intel-microcode2ucode [E] [D]
📄 ip [E] [D]
📄 ip6tables [E] [D]
📄 ip6tables-restore [E] [D]
📄 ip6tables-save [E] [D]
📄 ipmaddr [E] [D]
📄 iptables [E] [D]
📄 iptables-restore [E] [D]
📄 iptables-save [E] [D]
📄 iptunnel [E] [D]
📄 irqbalance [E] [D]
📄 isc-hmac-fixup [E] [D]
📄 kexec [E] [D]
📄 killall5 [E] [D]
📄 kpartx [E] [D]
📄 lchage [E] [D]
📄 ldattach [E] [D]
📄 ldconfig [E] [D]
📄 lfd [E] [D]
📄 lgroupadd [E] [D]
📄 lgroupdel [E] [D]
📄 lgroupmod [E] [D]
📄 lid [E] [D]
📄 lnewusers [E] [D]
📄 lnstat [E] [D]
📄 load_policy [E] [D]
📄 logrotate [E] [D]
📄 logsave [E] [D]
📄 losetup [E] [D]
📄 lpasswd [E] [D]
📄 lsmod [E] [D]
📄 lsof [E] [D]
📄 luseradd [E] [D]
📄 luserdel [E] [D]
📄 lusermod [E] [D]
📄 lwresd [E] [D]
📄 makedumpfile [E] [D]
📄 matchpathcon [E] [D]
📄 mii-diag [E] [D]
📄 mii-tool [E] [D]
📄 mkdict [E] [D]
📄 mkdumprd [E] [D]
📄 mke2fs [E] [D]
📄 mkfs [E] [D]
📄 mkfs.btrfs [E] [D]
📄 mkfs.cramfs [E] [D]
📄 mkfs.ext2 [E] [D]
📄 mkfs.ext3 [E] [D]
📄 mkfs.ext4 [E] [D]
📄 mkfs.minix [E] [D]
📄 mkfs.xfs [E] [D]
📄 mkhomedir_helper [E] [D]
📄 mklost+found [E] [D]
📄 mkswap [E] [D]
📄 modinfo [E] [D]
📄 modprobe [E] [D]
📄 mysqld [E] [D]
📄 named [E] [D]
📄 named-checkconf [E] [D]
📄 named-checkzone [E] [D]
📄 named-compilezone [E] [D]
📄 named-journalprint [E] [D]
📄 nameif [E] [D]
📄 netreport [E] [D]
📄 new-kernel-pkg [E] [D]
📄 newusers [E] [D]
📄 nl-class-add [E] [D]
📄 nl-class-delete [E] [D]
📄 nl-class-list [E] [D]
📄 nl-classid-lookup [E] [D]
📄 nl-cls-add [E] [D]
📄 nl-cls-delete [E] [D]
📄 nl-cls-list [E] [D]
📄 nl-link-list [E] [D]
📄 nl-pktloc-lookup [E] [D]
📄 nl-qdisc-add [E] [D]
📄 nl-qdisc-delete [E] [D]
📄 nl-qdisc-list [E] [D]
📄 nologin [E] [D]
📄 nsec3hash [E] [D]
📄 nstat [E] [D]
📄 ownership [E] [D]
📄 packer [E] [D]
📄 pam_console_apply [E] [D]
📄 pam_tally2 [E] [D]
📄 pam_timestamp_check [E] [D]
📄 paperconfig [E] [D]
📄 parted [E] [D]
📄 partprobe [E] [D]
📄 partx [E] [D]
📄 pflogsumm [E] [D]
📄 pidof [E] [D]
📄 ping6 [E] [D]
📄 pivot_root [E] [D]
📄 plipconfig [E] [D]
📄 pluginviewer [E] [D]
📄 portrelease [E] [D]
📄 portreserve [E] [D]
📄 postalias [E] [D]
📄 postcat [E] [D]
📄 postconf [E] [D]
📄 postdrop [E] [D]
📄 postfix [E] [D]
📄 postkick [E] [D]
📄 postlock [E] [D]
📄 postlog [E] [D]
📄 postmap [E] [D]
📄 postmulti [E] [D]
📄 postqueue [E] [D]
📄 postsuper [E] [D]
📄 poweroff [E] [D]
📄 ppp-watch [E] [D]
📄 pure-authd [E] [D]
📄 pure-config.pl [E] [D]
📄 pure-config.py [E] [D]
📄 pure-ftpd [E] [D]
📄 pure-ftpwho [E] [D]
📄 pure-mrtginfo [E] [D]
📄 pure-quotacheck [E] [D]
📄 pure-uploadscript [E] [D]
📄 pwck [E] [D]
📄 pwconv [E] [D]
📄 pwhistory_helper [E] [D]
📄 pwunconv [E] [D]
📄 qshape [E] [D]
📄 quot [E] [D]
📄 quotacheck [E] [D]
📄 quotaoff [E] [D]
📄 quotaon [E] [D]
📄 quotastats [E] [D]
📄 rcmysql [E] [D]
📄 rdisc [E] [D]
📄 rdma [E] [D]
📄 readprofile [E] [D]
📄 reboot [E] [D]
📄 repquota [E] [D]
📄 resize2fs [E] [D]
📄 resizepart [E] [D]
📄 restorecon [E] [D]
📄 rmmod [E] [D]
📄 rndc [E] [D]
📄 rndc-confgen [E] [D]
📄 route [E] [D]
📄 routef [E] [D]
📄 routel [E] [D]
📄 rpc.rquotad [E] [D]
📄 rpcbind [E] [D]
📄 rpcinfo [E] [D]
📄 rsyslogd [E] [D]
📄 rtacct [E] [D]
📄 rtcwake [E] [D]
📄 rtmon [E] [D]
📄 rtpr [E] [D]
📄 rtstat [E] [D]
📄 runlevel [E] [D]
📄 runuser [E] [D]
📄 safe_finger [E] [D]
📄 sasl2-shared-mechlist [E] [D]
📄 saslauthd [E] [D]
📄 sasldblistusers2 [E] [D]
📄 saslpasswd2 [E] [D]
📄 sefcontext_compile [E] [D]
📄 selabel_digest [E] [D]
📄 selabel_lookup [E] [D]
📄 selabel_lookup_best_match [E] [D]
📄 selabel_partial_match [E] [D]
📄 selinux_restorecon [E] [D]
📄 selinuxconlist [E] [D]
📄 selinuxdefcon [E] [D]
📄 selinuxenabled [E] [D]
📄 selinuxexeccon [E] [D]
📄 semanage [E] [D]
📄 semodule [E] [D]
📄 sendmail [E] [D]
📄 sendmail.postfix [E] [D]
📄 service [E] [D]
📄 sestatus [E] [D]
📄 setcap [E] [D]
📄 setenforce [E] [D]
📄 setfiles [E] [D]
📄 setquota [E] [D]
📄 setsebool [E] [D]
📄 sfdisk [E] [D]
📄 shutdown [E] [D]
📄 sim_server [E] [D]
📄 slattach [E] [D]
📄 sln [E] [D]
📄 smtp-sink [E] [D]
📄 smtp-source [E] [D]
📄 snmpd [E] [D]
📄 snmptrapd [E] [D]
📄 ss [E] [D]
📄 sshd [E] [D]
📄 sshd-keygen [E] [D]
📄 sulogin [E] [D]
📄 sushell [E] [D]
📄 swaplabel [E] [D]
📄 swapoff [E] [D]
📄 swapon [E] [D]
📄 switch_root [E] [D]
📄 sys-unconfig [E] [D]
📄 sysctl [E] [D]
📄 tc [E] [D]
📄 tcpd [E] [D]
📄 tcpdmatch [E] [D]
📄 tcsd [E] [D]
📄 telinit [E] [D]
📄 testsaslauthd [E] [D]
📄 tmpwatch [E] [D]
📄 tracepath [E] [D]
📄 tracepath6 [E] [D]
📄 try-from [E] [D]
📄 tsig-keygen [E] [D]
📄 tune2fs [E] [D]
📄 tuned [E] [D]
📄 tuned-adm [E] [D]
📄 udevadm [E] [D]
📄 unix_chkpwd [E] [D]
📄 unix_update [E] [D]
📄 update-alternatives [E] [D]
📄 useradd [E] [D]
📄 userdel [E] [D]
📄 userhelper [E] [D]
📄 usermod [E] [D]
📄 usernetctl [E] [D]
📄 uuserver [E] [D]
📄 vigr [E] [D]
📄 vipw [E] [D]
📄 virt-what [E] [D]
📄 visudo [E] [D]
📄 vmcore-dmesg [E] [D]
📄 vpddecode [E] [D]
📄 weak-modules [E] [D]
📄 wipefs [E] [D]
📄 wpa_cli [E] [D]
📄 wpa_passphrase [E] [D]
📄 wpa_supplicant [E] [D]
📄 xfs_admin [E] [D]
📄 xfs_bmap [E] [D]
📄 xfs_copy [E] [D]
📄 xfs_db [E] [D]
📄 xfs_estimate [E] [D]
📄 xfs_freeze [E] [D]
📄 xfs_fsr [E] [D]
📄 xfs_growfs [E] [D]
📄 xfs_info [E] [D]
📄 xfs_io [E] [D]
📄 xfs_logprint [E] [D]
📄 xfs_mdrestore [E] [D]
📄 xfs_metadump [E] [D]
📄 xfs_mkfile [E] [D]
📄 xfs_ncheck [E] [D]
📄 xfs_quota [E] [D]
📄 xfs_repair [E] [D]
📄 xfs_rtcp [E] [D]
📄 xqmstats [E] [D]
📄 xtables-multi [E] [D]
📄 yum-complete-transaction [E] [D]
📄 yumdb [E] [D]
📄 zdump [E] [D]
📄 zic [E] [D]
📄 zramctl [E] [D]

Editing: augenrules

#!/bin/bash

# Script to concatenate rules files found in a base audit rules directory
# to form a single /etc/audit/audit.rules file suitable for loading into
# the Linux audit system

# When forming the interim rules file, both empty lines and comment
# lines (starting with # or <whitespace>#) are stripped as the source files
# are processed.
#
# Having formed the interim rules file, the script checks if the file is empty
# or is identical to the existing /etc/audit/audit.rules and if either of
# these cases are true, it does not replace the existing file
#

# Variables
#
# DestinationFile:
#   Destination rules file
# SourceRulesDir:
#   Directory location to find component rule files
# TmpRules:
#   Temporary interim rules file
# ASuffix:
#   Suffix for previous audit.rules file if this script replaces it.
#   The file is left in the destination directory with suffix with $ASuffix

DestinationFile=/etc/audit/audit.rules
SourceRulesDir=/etc/audit/rules.d
TmpRules=`mktemp /tmp/aurules.XXXXXXXX`
ASuffix="prev"
OnlyCheck=0
LoadRules=0
RETVAL=0
usage="Usage: $0 [--check|--load]"

# Delete the interim file on faults
trap 'rm -f ${TmpRules}; exit 1' 1 2 3 13 15

try_load() {
	if [ $LoadRules -eq 1 ] ; then
		/sbin/auditctl -R ${DestinationFile}
		RETVAL=$?
	fi
}

while [ $# -ge 1 ]
do
	if [ "$1" = "--check" ] ; then
		OnlyCheck=1
	elif [ "$1" = "--load" ] ; then
		LoadRules=1
	else
		echo "$usage"
		exit 1
	fi
	shift
done

# Check environment
if [ ! -d ${SourceRulesDir} ]; then
	echo "$0: No rules directory - ${SourceRulesDir}"
	rm -f ${TmpRules}
	try_load
	exit 1
fi

# Create the interim rules file ensuring its access modes protect it
# from normal users and strip empty lines and comment lines. We also ensure
#   - the last processed -D directive without an option is emitted as the first
#     line. -D directives with options are left in place
#   - the last processed -b directory is emitted as the second line
#   - the last processed -f directory is emitted as the third line
#   - the last processed -e directive is emitted as the last line
umask 0137
echo "## This file is automatically generated from $SourceRulesDir" >> ${TmpRules}
for rules in $(/bin/ls -1v ${SourceRulesDir} | grep "\.rules$") ; do
	cat ${SourceRulesDir}/${rules}
done | awk '
BEGIN   {
        minus_e = "";
        minus_D = "";
        minus_f = "";
        minus_b = "";
        rest = 0;
} {
        if (length($0) < 1) { next; }
        if (match($0, "^\\s*#")) { next; }
        if (match($0, "^\\s*-e")) { minus_e = $0; next; }
        if (match($0, "^\\s*-D\\s*$")) { minus_D = $0; next; }
        if (match($0, "^\\s*-f")) { minus_f = $0; next; }
        if (match($0, "^\\s*-b")) { minus_b = $0; next; }
        rules[rest++] = $0;
}
END     {
        printf "%s\n%s\n%s\n", minus_D, minus_b, minus_f;
        for (i = 0; i < rest; i++) { printf "%s\n", rules[i]; }
        printf "%s\n", minus_e;
}' >> ${TmpRules}

# If empty then quit
if [ ! -s ${TmpRules} ]; then
	echo "$0: No rules"
	rm -f ${TmpRules}
	try_load
	exit $RETVAL
fi

# If the same then quit
cmp -s ${TmpRules} ${DestinationFile} > /dev/null 2>&1
if [ $? -eq 0 ]; then
	echo "$0: No change"
	rm -f ${TmpRules}
	try_load
	exit $RETVAL
elif [ $OnlyCheck -eq 1 ] ; then
	echo "$0: Rules have changed and should be updated"
	rm -f ${TmpRules}
	exit 0
fi

# Otherwise we install the new file
if [ -f ${DestinationFile} ]; then
	cp ${DestinationFile} ${DestinationFile}.${ASuffix}
fi
# We copy the file so that it gets the right selinux lable
cp ${TmpRules} ${DestinationFile}
chmod 0640 ${DestinationFile}
# Restore context on MLS system. /tmp is SystemLow & audit.rules is SystemHigh
if [ -x /usr/sbin/restorecon ] ; then
	/usr/sbin/restorecon -F ${DestinationFile}
fi
rm -f ${TmpRules}

try_load
exit $RETVAL