Status of Sun BSM/Auditd Support ?

[Phil Dibowitz]

On Mon, Dec 20, 2004 at 04:30:03PM +1100, Darren Tucker wrote:
> Darren Tucker wrote:
> >I was working on it a while back, but I had trouble testing it (I 
> >enabled BSM on my SPARC but it didn't appear to be working, and I'm not 
> >sure if I'm doing something wrong) and got sidetracked.
> 
> OK, I dusted off my old patch, fixed a few things and split it in two:
> 
> openssh-audit-base.patch: adds the instrumentation to sshd and an 
> example/debug audit module, and

Erm. FYI, it applies with a fari amount of fuz:

patching file `Makefile.in'
Hunk #1 succeeded at 84 (offset -1 lines).
patching file `auth.c'
patching file `auth.h'
patching file `auth1.c'
Hunk #1 succeeded at 245 (offset -2 lines).
Hunk #2 succeeded at 270 (offset -15 lines).
patching file `auth2.c'
Hunk #1 succeeded at 165 (offset -2 lines).
Hunk #2 succeeded at 215 with fuzz 1.
Hunk #3 succeeded at 246 (offset -12 lines).
patching file `configure.ac'
Hunk #1 succeeded at 839 with fuzz 1 (offset -35 lines).
Hunk #2 succeeded at 1752 (offset -38 lines).
patching file `defines.h'
patching file `loginrec.c'
Hunk #1 succeeded at 157 with fuzz 2 (offset 26 lines).
Hunk #2 succeeded at 204 with fuzz 2 (offset -2 lines).
patching file `monitor.c'
Hunk #4 succeeded at 1497 (offset -3 lines).
patching file `monitor.h'
patching file `monitor_wrap.c'
Hunk #1 succeeded at 1098 (offset -5 lines).
patching file `monitor_wrap.h'
patching file `session.c'
Hunk #2 succeeded at 1227 (offset -6 lines).
patching file `sshd.c'
patching file `audit.c'
patching file `audit.h'

That was to 3.9p1...

the -bsm patch applies fine. Compiling now.. ;)


-- 
Phil Dibowitz
Systems Architect and Administrator
Enterprise Infrastructure / ISD / USC
UCC 174 - 213-821-5427

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20041220/323cd1a3/attachment.bin