@mckaygerhard commented on GitHub:
yes.. why you asking? is working if you compiled it! ans deploy in your host!
@paolafrancesca commented on GitHub:
thanks @stefanbenten
@stefanbenten commented on GitHub:
I can also assist with this sometime this week. As we have been running a different UI in the past, I can pull out the script I used for that.
@probonopd commented on GitHub:
Thanks. What is misleading is that https://transfer.sh links directly here.
@brodjieski commented on GitHub:
The command in the remediation script should change the flags to allow for modifications. Only the /etc/security/audit_control file is affected. Did you run…
@cipineda commented on GitHub:
No I'm not, I installed mSCP project yesterday (09/06/23). I do see that line but I think there are more lines that are missing the unlocking of the files.
@cipineda commented on GitHub:
Here it is.
P4: //depot/projects/trustedbsd/openbsm/etc/audit_control#8
dir:/var/audit flags:lo,aa,ad,-ex,-fd,-fm,-fr,-fw minfree:25 naflags:lo,aa p…
@cipineda commented on GitHub:
Complete troubleshoot process:
cat /etc/security/audit_control (displaying relevant lines only)
expire-after:10M
`/usr/bin/sed -i.bak 's/^expire-after.*/e…
@cipineda commented on GitHub:
The rule Im using and reporting in this issue is audit_flags_fm_configure and it failed as coded, until I modified the proposed code above, then it marked the…
@brodjieski commented on GitHub:
Can you share your configuration in /etc/security/audit_control?
@golbiga commented on GitHub:
Generate Guidance which creates the compliance script was updated awhile ago and is in all of the branches.
https://github.com/usnistgov/macos_security/blob/40e4f1…
@cipineda commented on GitHub:
The same behavior happens with audit_settings_failure_notify
@brodjieski commented on GitHub:
There are 2 different rules that touch upon the fm flag for auditing. One is audit_flags_fm_configure and the other is audit_flags_fm_failed_configure. …
@robertgendler commented on GitHub:
The launchctl load works just fine.
When SIP is enabled, you can't disable Xprotect and so you can't load XProtect.
If you disable SIP, then stop and…