From 8e4972fb11b89e8aa392561611ea5af38ecab01a Mon Sep 17 00:00:00 2001 From: Dmitri Fedotov Date: Tue, 26 Sep 2023 16:19:26 +0300 Subject: [PATCH] mask audit-rules.service * to avoid unnecessary auditctl execution * rule loading is managed by auditbeat anyway --- pkg/templates/node_1.26.go | 3 +++ pkg/templates/node_1.27.go | 3 +++ 2 files changed, 6 insertions(+) diff --git a/pkg/templates/node_1.26.go b/pkg/templates/node_1.26.go index fdf93686db..c0bfd9e051 100644 --- a/pkg/templates/node_1.26.go +++ b/pkg/templates/node_1.26.go @@ -93,6 +93,9 @@ systemd: Type=oneshot [Install] WantedBy=multi-user.target + - name: audit-rules.service + mask: true + enable: false storage: files: - path: /etc/crictl.yaml diff --git a/pkg/templates/node_1.27.go b/pkg/templates/node_1.27.go index f01b0acc75..a2705410c8 100644 --- a/pkg/templates/node_1.27.go +++ b/pkg/templates/node_1.27.go @@ -92,6 +92,9 @@ systemd: Type=oneshot [Install] WantedBy=multi-user.target + - name: audit-rules.service + mask: true + enable: false storage: files: - path: /etc/crictl.yaml