overlay coreos-base/misc-files: Drop audit-rules service file

The package seems to be providing its own now.
This commit is contained in:
Krzesimir Nowak 2024-10-01 12:35:11 +02:00
parent d3ef6fd492
commit ee0ef8a3df
2 changed files with 2 additions and 21 deletions

View File

@ -1,16 +0,0 @@
[Unit]
Description=Load Security Auditing Rules
DefaultDependencies=no
After=local-fs.target systemd-tmpfiles-setup.service
Conflicts=shutdown.target
Before=sysinit.target shutdown.target
ConditionSecurity=audit
[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/sbin/augenrules --load
ExecStop=-/sbin/auditctl -D
[Install]
WantedBy=multi-user.target

View File

@ -33,7 +33,7 @@ RDEPEND="
>=app-shells/bash-5.2_p15-r2 >=app-shells/bash-5.2_p15-r2
ntp? ( >=net-misc/ntp-4.2.8_p17 ) ntp? ( >=net-misc/ntp-4.2.8_p17 )
policycoreutils? ( >=sys-apps/policycoreutils-3.6 ) policycoreutils? ( >=sys-apps/policycoreutils-3.6 )
audit? ( >=sys-process/audit-3.1.1 ) audit? ( >=sys-process/audit-4.0.1-r1 )
" "
declare -A CORE_BASH_SYMLINKS declare -A CORE_BASH_SYMLINKS
@ -166,10 +166,7 @@ src_install() {
# Upstream wants these to have restrictive perms. # Upstream wants these to have restrictive perms.
fperms 0640 "/etc/audit/rules.d/${name}" fperms 0640 "/etc/audit/rules.d/${name}"
done done
# Install a service that loads the rules (it's possibly # Enable audit-rules.service by default.
# something that a deamon does, but in our case the daemon is
# disabled by default).
systemd_dounit "${FILESDIR}/audit/audit-rules.service"
systemd_enable_service multi-user.target audit-rules.service systemd_enable_service multi-user.target audit-rules.service
fi fi