small

hackerschoice · Feb 1, 2025 · 885d7b2 · 885d7b2
1 parent d360291
commit 885d7b2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/hackshell.sh b/hackshell.sh
@@ -1001,7 +1001,7 @@ _warn_edr() {
 
     [ "${#fns[@]}" -gt 0 ] && out+="$(\ls -alrtd "${fns[@]}")"$'\n'
 
-    [ -f "/etc/audit/audit.rules" ] && _hs_chk_systemd "auditd"             "Auditd [/etc/audit/rules.d]"
+    [ -f "/etc/audit/audit.rules" ] && grep -v ^# "/etc/audit/audit.rules" | grep -Eqm1 '.{32,}' && _hs_chk_systemd "auditd"             "Auditd [/etc/audit/rules.d]"
     _hs_chk_systemd "avast"                             "Avast"
     _hs_chk_systemd "bdsec"                             "Bitdefender EDR / GavityZone XDR"
     _hs_chk_systemd "cylancesvc"                        "Blackberry cyPROTECT"