vxcontrol/soldr-modules
1
0
Fork 0
mirror of https://github.com/vxcontrol/soldr-modules.git synced 2026-07-25 08:45:39 -04:00
Code Issues 7 Packages Projects Releases 2 Wiki Activity

[PR #46] [MERGED] New module: auditd #44

New Issue
Closed
opened 2026-06-06 22:10:47 -04:00 by yindo · 0 comments
yindo commented 2026-06-06 22:10:47 -04:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/vxcontrol/soldr-modules/pull/46
Author: @souz9
Created: 2/10/2023
Status: ✅ Merged
Merged: 5/24/2023
Merged by: @asdek

Base: master ← Head: auditd

📝 Commits (10+)

  • 281f6d7 auditd: add exec helper
  • e017a46 auditd: add format_cmd helper
  • a2c586c auditd: add helpers to run luajit/busted
  • f9ef7b0 auditd: improve luajit/busted helpers
  • 0eafc0c auditd: luajit-busted: fix PATH
  • 862659a auditd: implement package installation
  • c0fd490 auditd: refactoring
  • ab2ae0e auditd: refactoring
  • 8df2641 auditd: support package managers: YUM, DNF
  • 4ea8a4b auditd: refactoring

📊 Changes

43 files changed (+1013 additions, -0 deletions)

View changed files

➕ auditd/1.0.0/.busted (+3 -0)
➕ auditd/1.0.0/Makefile (+14 -0)
➕ auditd/1.0.0/bmodule/main.vue (+18 -0)
➕ auditd/1.0.0/cmodule/args.json (+1 -0)
➕ auditd/1.0.0/cmodule/audit.lua (+80 -0)
➕ auditd/1.0.0/cmodule/audit_spec.lua (+71 -0)
➕ auditd/1.0.0/cmodule/event.lua (+31 -0)
➕ auditd/1.0.0/cmodule/exec.lua (+30 -0)
➕ auditd/1.0.0/cmodule/exec_spec.lua (+36 -0)
➕ auditd/1.0.0/cmodule/main.lua (+45 -0)
➕ auditd/1.0.0/cmodule/managed.lua (+93 -0)
➕ auditd/1.0.0/cmodule/managed_spec.lua (+87 -0)
➕ auditd/1.0.0/cmodule/pkg.lua (+94 -0)
➕ auditd/1.0.0/cmodule/pkg_spec.lua (+50 -0)
➕ auditd/1.0.0/cmodule/try.lua (+17 -0)
➕ auditd/1.0.0/cmodule/watcher.lua (+28 -0)
➕ auditd/1.0.0/config/action_config_schema.json (+6 -0)
➕ auditd/1.0.0/config/changelog.json (+14 -0)
➕ auditd/1.0.0/config/config_schema.json (+41 -0)
➕ auditd/1.0.0/config/current_action_config.json (+1 -0)

...and 23 more files

📄 Description

This PR adds new module auditd.

How to test the Change

  • Provide the following env variables before running the tests:
    SOLDR_MODULES=<path_to_soldr_modules>
    LUAPOWER_PLATFORM=linux32|linux64|osx64
  • Go inside the module directory auditd/1.0.0 and run make test.
  • make test-inside-docker can be used to run the tests inside the prepared list of docker images: Debian 10/11, Ubuntu 20.04/22.04, Oracle Linux 8.
  • Some of the tests require root and an OS booted with systemd. Run them inside a VM. Alternatively, such tests can be excluded for running with busted's flag --exclude-tags=root,systemd provided in BUSTED_FLAGS env variable.

Checklist:

  • I have updated the documentation accordingly.
  • I have added tests to cover my change.
  • All new and existing tests pass.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/vxcontrol/soldr-modules/pull/46 **Author:** [@souz9](https://github.com/souz9) **Created:** 2/10/2023 **Status:** ✅ Merged **Merged:** 5/24/2023 **Merged by:** [@asdek](https://github.com/asdek) **Base:** `master` ← **Head:** `auditd` --- ### 📝 Commits (10+) - [`281f6d7`](https://github.com/vxcontrol/soldr-modules/commit/281f6d71f8a2ca08076b2c373071bf96b0a36430) auditd: add `exec` helper - [`e017a46`](https://github.com/vxcontrol/soldr-modules/commit/e017a46a598a1d57b2477dff83044e1b858c5791) auditd: add `format_cmd` helper - [`a2c586c`](https://github.com/vxcontrol/soldr-modules/commit/a2c586c809bdcb0cf36d9038c30406b8db625c2e) auditd: add helpers to run luajit/busted - [`f9ef7b0`](https://github.com/vxcontrol/soldr-modules/commit/f9ef7b0dccb5c41ca183fa9d82272528bba597bc) auditd: improve luajit/busted helpers - [`0eafc0c`](https://github.com/vxcontrol/soldr-modules/commit/0eafc0cfb51c7347ae90ca9d81fc95d3a261b82b) auditd: luajit-busted: fix PATH - [`862659a`](https://github.com/vxcontrol/soldr-modules/commit/862659a74775fea276623e411f309e0873914b4b) auditd: implement package installation - [`c0fd490`](https://github.com/vxcontrol/soldr-modules/commit/c0fd490a939bce854fdbc457797f37f1a47c54a0) auditd: refactoring - [`ab2ae0e`](https://github.com/vxcontrol/soldr-modules/commit/ab2ae0e48725dcb088ec72957c11739901da7461) auditd: refactoring - [`8df2641`](https://github.com/vxcontrol/soldr-modules/commit/8df2641f71d054d9735290d9c7dd6527e4a2d14e) auditd: support package managers: YUM, DNF - [`4ea8a4b`](https://github.com/vxcontrol/soldr-modules/commit/4ea8a4bb9321cd2cf89d5890bc2ca72f40c3e9a2) auditd: refactoring ### 📊 Changes **43 files changed** (+1013 additions, -0 deletions) <details> <summary>View changed files</summary> ➕ `auditd/1.0.0/.busted` (+3 -0) ➕ `auditd/1.0.0/Makefile` (+14 -0) ➕ `auditd/1.0.0/bmodule/main.vue` (+18 -0) ➕ `auditd/1.0.0/cmodule/args.json` (+1 -0) ➕ `auditd/1.0.0/cmodule/audit.lua` (+80 -0) ➕ `auditd/1.0.0/cmodule/audit_spec.lua` (+71 -0) ➕ `auditd/1.0.0/cmodule/event.lua` (+31 -0) ➕ `auditd/1.0.0/cmodule/exec.lua` (+30 -0) ➕ `auditd/1.0.0/cmodule/exec_spec.lua` (+36 -0) ➕ `auditd/1.0.0/cmodule/main.lua` (+45 -0) ➕ `auditd/1.0.0/cmodule/managed.lua` (+93 -0) ➕ `auditd/1.0.0/cmodule/managed_spec.lua` (+87 -0) ➕ `auditd/1.0.0/cmodule/pkg.lua` (+94 -0) ➕ `auditd/1.0.0/cmodule/pkg_spec.lua` (+50 -0) ➕ `auditd/1.0.0/cmodule/try.lua` (+17 -0) ➕ `auditd/1.0.0/cmodule/watcher.lua` (+28 -0) ➕ `auditd/1.0.0/config/action_config_schema.json` (+6 -0) ➕ `auditd/1.0.0/config/changelog.json` (+14 -0) ➕ `auditd/1.0.0/config/config_schema.json` (+41 -0) ➕ `auditd/1.0.0/config/current_action_config.json` (+1 -0) _...and 23 more files_ </details> ### 📄 Description This PR adds new module `auditd`. ### How to test the Change - Provide the following env variables before running the tests: `SOLDR_MODULES=<path_to_soldr_modules>` `LUAPOWER_PLATFORM=linux32|linux64|osx64` - Go inside the module directory `auditd/1.0.0` and run `make test`. - `make test-inside-docker` can be used to run the tests inside the prepared list of docker images: Debian 10/11, Ubuntu 20.04/22.04, Oracle Linux 8. - Some of the tests require root and an OS booted with systemd. Run them inside a VM. Alternatively, such tests can be excluded for running with busted's flag `--exclude-tags=root,systemd` provided in `BUSTED_FLAGS` env variable. ### Checklist: <!--- Go over all the following points, and put an `x` in all the boxes that apply. --> <!--- If you are unsure about any of these, please ask for clarification. We are here to help! --> - [ ] I have updated the documentation accordingly. - [x] I have added tests to cover my change. - [x] All new and existing tests pass. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-06-06 22:10:47 -04:00
yindo closed this issue 2026-06-06 22:10:48 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
darwin
documentation
enhancement
file_reader
file_reader
file_remover
file_uloader
file_uloader
linux
osquery
proc_terminator
pull-request
Mirrored from GitHub Pull Request
 shell
shell
sysmon
tests
windows
windows
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: vxcontrol/soldr-modules#44
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?