From 4d63548868ec4806d62d82337bb278e6dd34f21e Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Thu, 30 Jun 2016 21:11:13 +0200
Subject: tv audit: -a task,never

---
 tv/2configs/audit.nix   | 9 +++++++++
 tv/2configs/default.nix | 1 +
 2 files changed, 10 insertions(+)
 create mode 100644 tv/2configs/audit.nix

(limited to 'tv/2configs')

diff --git a/tv/2configs/audit.nix b/tv/2configs/audit.nix
new file mode 100644
index 000000000..644741a5b
--- /dev/null
+++ b/tv/2configs/audit.nix
@@ -0,0 +1,9 @@
+{ ... }:
+
+{
+  security.audit = {
+    rules = [
+      "-a task,never"
+    ];
+  };
+}
diff --git a/tv/2configs/default.nix b/tv/2configs/default.nix
index 3e4810dd3..dcc3edd82 100644
--- a/tv/2configs/default.nix
+++ b/tv/2configs/default.nix
@@ -25,6 +25,7 @@ with config.krebs.lib;
 
   imports = [
     <secrets>
+    ./audit.nix
     ./backup.nix
     ./nginx
     ./vim.nix
-- 
cgit v1.2.3