major/securekickstarts

find PART

Opened this issue · 1 comments

Great kickstart template for general use. I took a stab at running it today and found that my kickstart failed at:

find PART -xdev ( -perm -4000 -o -perm -2000 ) -type f | awk '{print "-a always,exit -F path=" $1 " -F perm=x -F auid>=500 -F auid!=4294967295 -k privileged" }' >> /etc/audit/audit.rules

I believe PART is supposed to be partition. is / recommended for this section?

It is supposed to be a partition, however it looks like it was supposed to be treated as a variable (without digging into the code.)