diff --git a/roles/float-base/templates/audit/rules.d/10system.rules.j2 b/roles/float-base/templates/audit/rules.d/10system.rules.j2 index 17a84776012e9a4af6257df99479413f8fa4bc8c..4b2b304434406e88957c38e7ed483b3071dc1944 100644 --- a/roles/float-base/templates/audit/rules.d/10system.rules.j2 +++ b/roles/float-base/templates/audit/rules.d/10system.rules.j2 @@ -4,6 +4,8 @@ ## General system rules +{# TODO: get rid of this section entirely? #} +{% if float_debian_dist != 'trixie' %} # Record Events That Modify Date and Time Information {% if ansible_architecture == "x86_64" %} -a always,exit -F arch=b64 -F uid!=ntp -S clock_settime -k time-change @@ -11,6 +13,7 @@ {% endif %} -a always,exit -F arch=b32 -F uid!=ntp -S clock_settime -k time-change -a always,exit -F arch=b32 -F uid!=ntp -S adjtimex -S settimeofday -S stime -k time-change +{% endif %} -w /etc/localtime -p wa -k time-change # Record Events That Modify User/Group Information