On 2015-11-06 1:28 PM, Steve Grubb wrote: > That said, you can audit some things by placing a watch on specific > helpers in /usr/libexec. -Steve
Can you expand on that a bit? I have no idea which helpers gnome might use for a reboot operation. I tried this rule just for fun: -w /usr/libexec -p rwxa -k libexec But I didn't see anything related to power when I rebooted the system via Gnome. -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Robert Jacobson [email protected] Lead System Admin Solar Dynamics Observatory (SDO) Bldg 14, E222 (301) 286-1591 -- SCAP Security Guide mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide https://github.com/OpenSCAP/scap-security-guide/
