auditd service: make more useful

Enable kernel audit and install userspace utilities by default.
This commit is contained in:
Nikolay Amiantov 2019-06-10 18:27:46 +03:00
parent ccbb08ed88
commit c3865335fb

View File

@ -6,6 +6,10 @@ with lib;
options.security.auditd.enable = mkEnableOption "the Linux Audit daemon";
config = mkIf config.security.auditd.enable {
boot.kernelParams = [ "audit=1" ];
environment.systemPackages = [ pkgs.audit ];
systemd.services.auditd = {
description = "Linux Audit daemon";
wantedBy = [ "basic.target" ];