module Ciscat
  module Auditd
    module HelperPrivilegedCommands
      include Chef::Mixin::ShellOut

      def render_rules
        cmd = shell_out!('find / -xdev \( -perm -4000 -o -perm -2000 \) -type f | awk \'{print "-a always,exit -F path=" $1 " -F perm=x -F auid>=1000 -F auid!=4294967295 -k privileged" }\'', returns: [0, 1, 2])
        cmd.stdout
      end
    end
  end
end