mask audit-rules.service (#833)

* to avoid unnecessary auditctl execution * rule loading is managed by auditbeat anyway
sapcc · Sep 27, 2023 · 0ced4f6 · 0ced4f6
1 parent e2f025f
commit 0ced4f6
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/pkg/templates/node_1.26.go b/pkg/templates/node_1.26.go
@@ -93,6 +93,9 @@ systemd:
         Type=oneshot
         [Install]
         WantedBy=multi-user.target
+    - name: audit-rules.service
+      mask: true
+      enable: false
 storage:
   files:
     - path: /etc/crictl.yaml

diff --git a/pkg/templates/node_1.27.go b/pkg/templates/node_1.27.go
@@ -92,6 +92,9 @@ systemd:
         Type=oneshot
         [Install]
         WantedBy=multi-user.target
+    - name: audit-rules.service
+      mask: true
+      enable: false
 storage:
   files:
     - path: /etc/crictl.yaml