1 files changed, 24 insertions, 0 deletions

diff --git a/old/au.sh b/old/au.sh
new file mode 100755
index 0000000..66da315
--- /dev/null
+++ b/old/au.sh
@@ -0,0 +1,24 @@
+#!/bin/bash
+
+##########################################################################
+# File Name    : au.sh
+# Encoding     : utf-8
+# Author       : We-unite
+# Email        : weunite1848@gmail.com
+# Created Time : 2024-07-25 17:56:49
+##########################################################################
+
+set -e
+
+if [ $EUID -ne 0 ]; then
+        echo -e "Please run as root/sudo"
+        exit 1
+fi
+
+auditctl -D
+
+fileSyscall="open write creat unlink mkdir rmdir chmod fchmod chown fchown lchown flock"
+for syscall in $fileSyscall; do
+        auditctl -a exit,always -F arch=b64 -S $syscall
+done
+