auditd service: make more useful
Enable kernel audit and install userspace utilities by default.
This commit is contained in:
parent
ccbb08ed88
commit
c3865335fb
1 changed files with 4 additions and 0 deletions
|
@ -6,6 +6,10 @@ with lib;
|
||||||
options.security.auditd.enable = mkEnableOption "the Linux Audit daemon";
|
options.security.auditd.enable = mkEnableOption "the Linux Audit daemon";
|
||||||
|
|
||||||
config = mkIf config.security.auditd.enable {
|
config = mkIf config.security.auditd.enable {
|
||||||
|
boot.kernelParams = [ "audit=1" ];
|
||||||
|
|
||||||
|
environment.systemPackages = [ pkgs.audit ];
|
||||||
|
|
||||||
systemd.services.auditd = {
|
systemd.services.auditd = {
|
||||||
description = "Linux Audit daemon";
|
description = "Linux Audit daemon";
|
||||||
wantedBy = [ "basic.target" ];
|
wantedBy = [ "basic.target" ];
|
||||||
|
|
Loading…
Reference in a new issue