Package changes: +aide-common 0.17.3-4+deb11u1 all +altermime 0.3.10-12 amd64 +bsd-mailx 8.1.2-0.20180807cvs-2 amd64 +dovecot-core 1:2.3.13+dfsg1-2 amd64 +libdbd-mysql-perl 4.050-3+b1 amd64 +logwatch 7.5.5-1 all +postfix 3.5.6-1+b1 amd64 +postfix-mysql 3.5.6-1+b1 amd64 +postfix-pcre 3.5.6-1+b1 amd64 +postfix-sqlite 3.5.6-1+b1 amd64
26 lines
1014 B
Plaintext
26 lines
1014 B
Plaintext
# this is a preliminary paranoid rule from a local installation. Feel free to submit
|
|
# patches that may make the rule suitable for your installation
|
|
|
|
@@define MAJMIN [[:digit:]]+:[[:digit:]]+
|
|
/dev$ d VarDirInode
|
|
/dev/(block|char|mapper|shm)$ d VarDirInode-s
|
|
!/dev/(block|char)/@@{MAJMIN}$ l
|
|
/dev/bus/usb/00[1234]$ d VarDirInode
|
|
!/dev/bus/usb/00[1234]/0[01][[:digit:]]$ c
|
|
/dev/disk/by-id$ d VarDirInode
|
|
!/dev/disk/by-id/(dm-name-[-[:alnum:]_]+)$ l
|
|
!/dev/disk/by-id/(dm-uuid-[-[:alnum:]]+)$ l
|
|
!/dev/disk/by-label/[-[:lower:]]+$ l
|
|
!/dev/disk/by-uuid/[[:xdigit:]]{8}-([[:xdigit:]]{4}-){3}[[:xdigit:]]{12}$ l
|
|
!/dev/dm-[[:digit:]]+$ b
|
|
!/dev/mapper/[-[:alnum:]_]+$ l
|
|
!/dev/serial/by-id/usb-[-[:alnum:]_\\.]+-port0$ l
|
|
!/dev/serial/by-path/pci-0000:0000:12\\.0-usb-[[:digit:]:\\.]+-port0$ l
|
|
!/dev/serial/by-path/platform-1c1[4c]000\\.usb-usb-[-[:digit:]:\\.]+port0$ l
|
|
!/dev/shm/spice\\.[[:digit:]]+$ f
|
|
!/dev/tap[[:digit:]]+ c
|
|
|
|
!/dev/@@{HOSTNAME}/[-[:lower:][:digit:]_]+$ l
|
|
!/dev/@@{HOSTNAME}_r/[-[:lower:][:digit:]_]+$ l
|
|
|