Преглед на файлове

Additional tripwire rules

Bob Mottram преди 8 години
родител
ревизия
4efb04dce5
променени са 1 файла, в които са добавени 7 реда и са изтрити 0 реда
  1. 7
    0
      src/freedombone-base-tripwire

+ 7
- 0
src/freedombone-base-tripwire Целия файл

124
     if ! grep -q '!/usr/local/lib/node_modules' /etc/tripwire/twpol.txt; then
124
     if ! grep -q '!/usr/local/lib/node_modules' /etc/tripwire/twpol.txt; then
125
         sed -i '\|/etc\t\t->.*|a\    !/usr/local/lib/node_modules ;' /etc/tripwire/twpol.txt
125
         sed -i '\|/etc\t\t->.*|a\    !/usr/local/lib/node_modules ;' /etc/tripwire/twpol.txt
126
     fi
126
     fi
127
+    # Events here are likely due to USB HRNG activity
128
+    if ! grep -q '!/dev/char' /etc/tripwire/twpol.txt; then
129
+        sed -i '\|/dev\t\t->.*|a\    !/dev/char ;' /etc/tripwire/twpol.txt
130
+    fi
131
+    if ! grep -q '!/dev/bus/usb' /etc/tripwire/twpol.txt; then
132
+        sed -i '\|/dev\t\t->.*|a\    !/dev/bus/usb ;' /etc/tripwire/twpol.txt
133
+    fi
127
 
134
 
128
     # Not much is in /usr/local/bin other than project commands and avoiding it removes
135
     # Not much is in /usr/local/bin other than project commands and avoiding it removes
129
     # problems with updates. This is a tradeoff, but not by much.
136
     # problems with updates. This is a tradeoff, but not by much.