Server : Apache System : Linux 145.162.205.92.host.secureserver.net 5.14.0-611.45.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Apr 1 05:56:53 EDT 2026 x86_64 User : tradze ( 1001) PHP Version : 8.1.34 Disable Function : NONE Directory :  /usr/share/audit/sample-rules/

Upload File : current_dir [ Writeable ] document_root [ Writeable ]

# These rules watch for invocation of things known to install software

-a always,exit -F arch=b32 -F perm=x -F path=/usr/bin/dnf-3 -F key=software-installer
-a always,exit -F arch=b64 -F perm=x -F path=/usr/bin/dnf-3 -F key=software-installer
-a always,exit -F arch=b32 -F perm=x -F path=/usr/bin/yum -F key=software-installer
-a always,exit -F arch=b64 -F perm=x -F path=/usr/bin/yum -F key=software-installer
-a always,exit -F arch=b32 -F perm=x -F path=/usr/bin/pip -F key=software-installer
-a always,exit -F arch=b64 -F perm=x -F path=/usr/bin/pip -F key=software-installer
-a always,exit -F arch=b32 -F perm=x -F path=/usr/bin/npm -F key=software-installer
-a always,exit -F arch=b64 -F perm=x -F path=/usr/bin/npm -F key=software-installer
-a always,exit -F arch=b32 -F perm=x -F path=/usr/bin/cpan -F key=software-installer
-a always,exit -F arch=b64 -F perm=x -F path=/usr/bin/cpan -F key=software-installer
-a always,exit -F arch=b32 -F perm=x -F path=/usr/bin/gem -F key=software-installer
-a always,exit -F arch=b64 -F perm=x -F path=/usr/bin/gem -F key=software-installer
-a always,exit -F arch=b32 -F perm=x -F path=/usr/bin/luarocks -F key=software-installer
-a always,exit -F arch=b64 -F perm=x -F path=/usr/bin/luarocks -F key=software-installer