usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-02-03 14:03:24 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity

fix[rule]: corrected regex for !log_allowed in sed

Browse Source 
command now comments the line instead of deleting
This commit is contained in:
Dan Brodjieski
2025-03-19 12:18:58 -04:00
parent e3429c6abb
commit ef6f6dc55d
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
rules/os/os_sudo_log_enforce.yaml
View File

@@ -9,7 +9,7 @@ result:
fix: |
[source,bash]
----
/usr/bin/find /etc/sudoers* -type f -exec sed -i '' '/Defaults \!log_allowed/d' '{}' \;
/usr/bin/find /etc/sudoers* -type f -exec sed -i '' '/^Defaults[[:blank:]]*\!log_allowed/s/^/# /' '{}' \;
/bin/echo "Defaults log_allowed" >> /etc/sudoers.d/mscp
----
references: