···

       
6
       
6
       
 
       
  options.security.auditd.enable = mkEnableOption "the Linux Audit daemon";

     

       
7
       
7
       
 
       


     

       
8
       
8
       
 
       
  config = mkIf config.security.auditd.enable {

     

       
9
       
9
       
+
       
    boot.kernelParams = [ "audit=1" ];

     

       
10
       
10
       
+
       


     

       
11
       
11
       
+
       
    environment.systemPackages = [ pkgs.audit ];

     

       
12
       
12
       
+
       


     

       
9
       
13
       
 
       
    systemd.services.auditd = {

     

       
10
       
14
       
 
       
      description = "Linux Audit daemon";

     

       
11
       
15
       
 
       
      wantedBy = [ "basic.target" ];